44:[["$","span",null,{"className":"flex items-start gap-2 text-sm font-semibold leading-tight text-warn","children":[["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-base shrink-0 mt-px","children":["$undefined",[["$","path","0",{"d":"M511.988 288.9c-.478 17.43-15.217 31.1-32.653 31.1H424v16c0 21.864-4.882 42.584-13.6 61.145l60.228 60.228c12.496 12.497 12.496 32.758 0 45.255-12.498 12.497-32.759 12.496-45.256 0l-54.736-54.736C345.886 467.965 314.351 480 280 480V236c0-6.627-5.373-12-12-12h-24c-6.627 0-12 5.373-12 12v244c-34.351 0-65.886-12.035-90.636-32.108l-54.736 54.736c-12.498 12.497-32.759 12.496-45.256 0-12.496-12.497-12.496-32.758 0-45.255l60.228-60.228C92.882 378.584 88 357.864 88 336v-16H32.666C15.23 320 .491 306.33.013 288.9-.484 270.816 14.028 256 32 256h56v-58.745l-46.628-46.628c-12.496-12.497-12.496-32.758 0-45.255 12.498-12.497 32.758-12.497 45.256 0L141.255 160h229.489l54.627-54.627c12.498-12.497 32.758-12.497 45.256 0 12.496 12.497 12.496 32.758 0 45.255L424 197.255V256h56c17.972 0 32.484 14.816 31.988 32.9zM257 0c-61.856 0-112 50.144-112 112h224C369 50.144 318.856 0 257 0z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}],["$","span",null,{"children":"Altas"}]]}],["$","span",null,{"className":"block font-display text-3xl font-semibold tracking-tight text-ink mt-1","children":157}]] 45:["$","article","CVE-2026-96627",{"data-item-key":"CVE-2026-96627","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[["$","span","código aberto",{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-surface-raised text-ink-muted border-border","children":"código aberto"}]]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-96627"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in backend/api/handlers/users.go sets PasswordHash for any target without comparing caller and target privilege. A holder of delegated users:update permission can submit a password change for the global..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-96627","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 46:["$","article","CVE-2026-30971",{"data-item-key":"CVE-2026-30971","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-30971"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated monitor Device field into shell commands in PHP and Perl control paths when an authenticated user with monitor-create or monitor-edit permission saves a Local..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-30971","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 47:["$","article","CVE-2026-102607",{"data-item-key":"CVE-2026-102607","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-102607"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events or View Snapshots..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-102607","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 48:["$","article","CVE-2026-111723",{"data-item-key":"CVE-2026-111723","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111723"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT. Attackers can self-register, read every account's bcrypt hash, reset the bootstrap administrator's password via..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111723","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 49:["$","article","CVE-2026-111681",{"data-item-key":"CVE-2026-111681","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111681"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manage accounts because the /api/users endpoints lack administrator role checks. Attackers can send POST, PUT, or DELETE requests to UserController to grant themselves ROLE_ADMIN, create administrators,..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111681","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 4a:["$","article","CVE-2026-111642",{"data-item-key":"CVE-2026-111642","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111642"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token keeping their..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111642","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 4b:["$","article","CVE-2026-109588",{"data-item-key":"CVE-2026-109588","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109588"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the validated buffer..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109588","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 4c:["$","article","CVE-2026-109587",{"data-item-key":"CVE-2026-109587","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109587"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call. To remediate this..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109587","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 4d:["$","article","CVE-2026-97380",{"data-item-key":"CVE-2026-97380","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-97380"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor privileges. A..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-97380","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 4e:["$","article","CVE-2026-106705",{"data-item-key":"CVE-2026-106705","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-106705"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither validates the..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-106705","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 4f:["$","article","CVE-2026-111413",{"data-item-key":"CVE-2026-111413","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111413"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Helper: from n/a through 1.0.8."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111413","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 50:["$","article","CVE-2026-109119",{"data-item-key":"CVE-2026-109119","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109119"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109119","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 51:["$","article","CVE-2026-111311",{"data-item-key":"CVE-2026-111311","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111311"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension allow-list in..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111311","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 52:["$","article","CVE-2026-92553",{"data-item-key":"CVE-2026-92553","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-92553"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitize_file_name() does not strip executable..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-92553","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 53:["$","article","CVE-2026-92115",{"data-item-key":"CVE-2026-92115","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-92115"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the `value` parameter of the `update-photo` AJAX action. This is due to insufficient shell escaping within the `wppa_image_magick_a()` function, where the..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-92115","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 54:["$","article","CVE-2026-110015",{"data-item-key":"CVE-2026-110015","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-110015"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator into clicking a crafted..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-110015","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 55:["$","article","CVE-2026-85659",{"data-item-key":"CVE-2026-85659","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-85659"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the `update_cc_details()` AJAX handler forwards an attacker-supplied `username` parameter to ONTRAPORT via `api_call('update_cc_details', ...)`..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-85659","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 56:["$","article","CVE-2026-111382",{"data-item-key":"CVE-2026-111382","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111382"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrupt client memory. Attackers can send RDPGFX AVC444 or AVC444v2 frames with odd-height region rects ending at surface height to write past..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111382","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 57:["$","article","CVE-2026-111380",{"data-item-key":"CVE-2026-111380","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111380"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer size as FramesPerPacket * 2 * nChannels in UINT32 arithmetic, bypassing the CVE-2026-91962 fix. A malicious RDP server can send FramesPerPacket of 2^30 in the..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111380","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 58:["$","article","CVE-2026-95859",{"data-item-key":"CVE-2026-95859","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.7"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-95859"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.49.5, Gossipsub GRAFT control-message handling unconditionally adds attacker-supplied topic hashes to connected_peer.topics without confirming that the peer previously subscribed to those topics. A remote..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-95859","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 59:["$","article","CVE-2026-68906",{"data-item-key":"CVE-2026-68906","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.7"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-68906"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, parseUserInformation in src/mms/iso_acse/acse.c checks len for zero before validating the negative bufPos returned by BerDecoder_decodeLength for a truncated..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-68906","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 5a:["$","article","CVE-2026-111663",{"data-item-key":"CVE-2026-111663","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.6"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111663"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints, through POST /graphql and retrieve the full response via..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111663","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 5b:["$","article","CVE-2026-111650",{"data-item-key":"CVE-2026-111650","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.6"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111650"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider, redirecting uploads and..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111650","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 5c:["$","article","CVE-2026-111633",{"data-item-key":"CVE-2026-111633","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.6"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111633"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set to 'admin' to call ApiAuthorize endpoints, modifying..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111633","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 5d:["$","article","CVE-2026-14452",{"data-item-key":"CVE-2026-14452","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.6"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-14452"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an attacker to execute arbitrary script in the session of an authenticated user with Setup access, or to redirect that user to an arbitrary external site, by tricking the user..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-14452","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 5e:["$","article","CVE-2026-111446",{"data-item-key":"CVE-2026-111446","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.6"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111446"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it is by default in development. Before 4.1.2 these tools have no local-access restriction; in 4.1.2 the restriction trusts client-supplied headers without checking the connecting..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111446","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 5f:["$","article","CVE-2026-109813",{"data-item-key":"CVE-2026-109813","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.6"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109813"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109813","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 60:["$","article","CVE-2026-96626",{"data-item-key":"CVE-2026-96626","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-96626"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/container_registry_service.go allow the registry URL to change while preserving the stored encrypted token. When a holder of registries:update and..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-96626","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 61:["$","article","CVE-2026-55543",{"data-item-key":"CVE-2026-55543","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-55543"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker-supplied class stored in that archive. When a user opens..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-55543","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 62:["$","article","CVE-2026-111399",{"data-item-key":"CVE-2026-111399","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111399"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111399","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 63:["$","article","CVE-2026-111684",{"data-item-key":"CVE-2026-111684","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.3"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111684"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' device certificates by supplying foreign serials or entity ids. Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCert under their own..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111684","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 64:["$","article","CVE-2026-111680",{"data-item-key":"CVE-2026-111680","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.3"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111680"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applications by supplying their own team id in the team query parameter. Attackers can target service or app ids exposed by /api/v1/simple/services and..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111680","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 65:["$","article","CVE-2026-100349",{"data-item-key":"CVE-2026-100349","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.2"]}],false,[["$","span","código aberto",{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-surface-raised text-ink-muted border-border","children":"código aberto"}]]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"GitHub Advisories"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-100349"}],["$","h3",null,{"className":"text-ink font-display font-semibold text-lg tracking-tight leading-snug mt-1 wrap-break-word","children":"kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content"}],["$","p",null,{"className":"text-xs text-ink-muted mt-0.5","children":"go · github.com/getkin/kin-openapi"}],["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"ValidateResponse panics on a nil pointer when a spec declares a response header with content instead of schema. doc.Validate() accepts that document, so the crash comes from a spec the library just called valid. Same class as GHSA-jpcw-4wr7-c3vq, which covered the request-parameter case in v0.144.0; this is the..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://github.com/advisories/GHSA-74vm-87hj-r66f","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 66:["$","article","CVE-2026-86009",{"data-item-key":"CVE-2026-86009","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-86009"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not control. A potentially malicious domain administrator enables spoofing for another hosted domain and can send emails that are authenticated..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-86009","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 67:["$","article","CVE-2026-68907",{"data-item-key":"CVE-2026-68907","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-68907"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtils_copyStringToBuffer while constructing an MMS_ASSOCIATION_SPECIFIC dataset reference...."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-68907","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 68:["$","article","CVE-2026-111854",{"data-item-key":"CVE-2026-111854","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111854"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access commands."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111854","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 69:["$","article","CVE-2026-49410",{"data-item-key":"CVE-2026-49410","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-49410"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth_handler consumes an attacker-supplied one-time Telegram login token and passes..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-49410","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 6a:["$","article","CVE-2026-61726",{"data-item-key":"CVE-2026-61726","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-61726"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated user with read and..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-61726","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 6b:["$","article","CVE-2026-111722",{"data-item-key":"CVE-2026-111722","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111722"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, PUT and DELETE /admin/v1/projects/:id to read, overwrite,..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111722","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 6c:["$","article","CVE-2026-111639",{"data-item-key":"CVE-2026-111639","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111639"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's Google-signed ID token..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111639","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 6d:["$","article","CVE-2026-111636",{"data-item-key":"CVE-2026-111636","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111636"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenant_demo' to gain full tenant administration,..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111636","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 6e:["$","article","CVE-2026-111634",{"data-item-key":"CVE-2026-111634","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111634"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource. Attackers can supply crafted Numeric or String placeholder values that bypass the broken SqlDetect guard to read unexposed tables..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111634","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 6f:["$","article","CVE-2026-111606",{"data-item-key":"CVE-2026-111606","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111606"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authenticated user to merge arbitrary persons by calling the mergeSpecifiedPersons account RPC. Attackers knowing two person UUIDs can graft attacker-controlled unverified social ids onto a victim person, then use login or..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111606","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 70:["$","article","CVE-2026-111605",{"data-item-key":"CVE-2026-111605","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111605"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload, read_file_data.json,..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111605","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 71:["$","article","CVE-2026-42269",{"data-item-key":"CVE-2026-42269","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-42269"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, the authenticated data-migration deletion route in plugins/data_migration/api/api.js passes the user-controlled exportid to clean_up_data without path validation...."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-42269","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 72:["$","article","CVE-2026-111391",{"data-item-key":"CVE-2026-111391","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111391"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111391","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 73:["$","article","CVE-2026-75903",{"data-item-key":"CVE-2026-75903","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-75903"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations, where the plugin's generated server configuration snippet guards the wrong..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-75903","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 74:["$","article","CVE-2026-97296",{"data-item-key":"CVE-2026-97296","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-97296"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-97296","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 75:["$","article","CVE-2026-109447",{"data-item-key":"CVE-2026-109447","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109447"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the `role` parameter handled by the `wppb_add_meta_to_user_on_activation()` function. The vulnerability exists..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109447","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 76:["$","article","CVE-2026-109221",{"data-item-key":"CVE-2026-109221","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109221"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copy_file function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales Representative-level..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109221","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 77:["$","article","CVE-2026-103895",{"data-item-key":"CVE-2026-103895","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-103895"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the `mo_by_pass_login()` function. This is due to `mo_delay_otp_process()` short-circuiting the authentication flow before password validation or the..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-103895","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 78:["$","article","CVE-2026-111447",{"data-item-key":"CVE-2026-111447","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111447"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to submit a nested form for their own parent can update and reassign another parent's hasMany or hasOne rows, or delete them when allowDelete=true. Nested..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111447","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 79:["$","article","CVE-2026-111445",{"data-item-key":"CVE-2026-111445","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111445"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of throwing. Applications relying on scopes for ownership or tenant..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111445","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 7a:["$","article","CVE-2026-104745",{"data-item-key":"CVE-2026-104745","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-104745"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0. The vulnerability exists because `alg_wc_ev_generate_user_code()` generates the per-user activation secret using `wp_rand(100)`..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-104745","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 7b:["$","article","CVE-2026-104932",{"data-item-key":"CVE-2026-104932","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.0"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-104932"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-104932","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 7c:["$","article","CVE-2026-93953",{"data-item-key":"CVE-2026-93953","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 8.0"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-93953"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to insufficient escaping on the user supplied parameter and the lack of sufficient preparation on an existing..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-93953","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 7d:["$","article","CVE-2026-102917",{"data-item-key":"CVE-2026-102917","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-102917"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-102917","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 7e:["$","article","CVE-2026-96424",{"data-item-key":"CVE-2026-96424","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-96424"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus"}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-96424","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 7f:["$","article","CVE-2026-88755",{"data-item-key":"CVE-2026-88755","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-88755"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-88755","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 80:["$","article","CVE-2026-104715",{"data-item-key":"CVE-2026-104715","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-104715"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-104715","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 81:["$","article","CVE-2026-111451",{"data-item-key":"CVE-2026-111451","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.8"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111451"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete unintended files; package..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111451","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 82:["$","article","CVE-2026-108374",{"data-item-key":"CVE-2026-108374","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.7"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-108374"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0, certain endpoints for status modification fail to enforce proper authorization checks. A low-privileged authenticated user can invoke state-changing whitelisted methods without required write, submit, cancel, document,..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-108374","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 83:["$","article","CVE-2026-59970",{"data-item-key":"CVE-2026-59970","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.7"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-59970"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-59970","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 84:["$","article","CVE-2026-111638",{"data-item-key":"CVE-2026-111638","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.7"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111638"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys and connect directly..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111638","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 85:["$","article","CVE-2026-102551",{"data-item-key":"CVE-2026-102551","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.7"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-102551"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement. To remediate..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-102551","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 86:["$","article","CVE-2026-86047",{"data-item-key":"CVE-2026-86047","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.7"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-86047"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A low-privileged attacker can..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-86047","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 87:["$","article","CVE-2026-111389",{"data-item-key":"CVE-2026-111389","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.7"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111389"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Any authenticated attacker, including a low-privilege account, can send specially crafted requests to these endpoints to extract sensitive..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111389","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 88:["$","article","CVE-2026-111044",{"data-item-key":"CVE-2026-111044","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.6"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111044"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to a stored paired-client certificate, but it did not require the presented certificate to be the exact enabled paired identity. Certificate text was also compared..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111044","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 89:["$","article","CVE-2026-111855",{"data-item-key":"CVE-2026-111855","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111855"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied file paths allows remote attackers to read arbitrary files accessible to the application. Depending on configuration,..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111855","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 8a:["$","article","CVE-2026-68498",{"data-item-key":"CVE-2026-68498","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-68498"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Object property name can consume while being parsed, independently of the much larger maxStringLength (default 100,000,000 characters) that bounds ordinary string values. For parsers built over character..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-68498","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 8b:["$","article","CVE-2026-102834",{"data-item-key":"CVE-2026-102834","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[["$","span","código aberto",{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-surface-raised text-ink-muted border-border","children":"código aberto"}]]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-102834"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length. An application consumes an MJPEG response from a malicious camera endpoint or a tampered..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-102834","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 8c:["$","article","GHSA-6fj4-rcr3-r7rr",{"data-item-key":"GHSA-6fj4-rcr3-r7rr","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[["$","span","código aberto",{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-surface-raised text-ink-muted border-border","children":"código aberto"}]]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"GitHub Advisories"}]]}],null,["$","h3",null,{"className":"text-ink font-display font-semibold text-lg tracking-tight leading-snug mt-1 wrap-break-word","children":"lopdf has a stack overflow via deeply nested PDF objects"}],["$","p",null,{"className":"text-xs text-ink-muted mt-0.5","children":"rust · lopdf"}],["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"lopdf::Document::loadmem (and the other load entry points) parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array (/X [[[ … ]]], on the order of 10,000 levels) exhausts the call stack and aborts the process with SIGABRT. Because this is a..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://github.com/advisories/GHSA-6fj4-rcr3-r7rr","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 8d:["$","article","CVE-2026-111710",{"data-item-key":"CVE-2026-111710","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111710"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as one decoding to a..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111710","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 8e:["$","article","CVE-2026-111706",{"data-item-key":"CVE-2026-111706","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111706"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing usernames, emails,..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111706","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 8f:["$","article","CVE-2026-111702",{"data-item-key":"CVE-2026-111702","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111702"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/{id} or the knowledgebaseId parameter of POST /api/models/chat to..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111702","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 90:["$","article","CVE-2026-111686",{"data-item-key":"CVE-2026-111686","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111686"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesbynum. Attackers can append crafted SQL after the LIMIT clause concatenated into a MyBatis-Plus QueryWrapper to extract database contents via..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111686","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 91:["$","article","CVE-2026-111685",{"data-item-key":"CVE-2026-111685","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111685"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by supplying a crafted num path parameter to /WebResource/findresourcebynum. Attackers can append SQL after the LIMIT clause concatenated via QueryWrapper.last() to extract database contents using..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111685","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 92:["$","article","CVE-2026-111613",{"data-item-key":"CVE-2026-111613","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111613"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endpoint. Attackers can supply a MySQL JDBC URL with allowLoadLocalInfile=true..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111613","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 93:["$","article","CVE-2026-111612",{"data-item-key":"CVE-2026-111612","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111612"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the hard-coded AES key..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111612","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 94:["$","article","CVE-2026-77630",{"data-item-key":"CVE-2026-77630","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-77630"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/uri.c synchronously calls getaddrinfo while parse_uri is processing attacker-supplied hostnames from inbound HTTP request targets in upnp/src/genlib/net/http/httpparser.c and GENA..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-77630","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 95:["$","article","CVE-2026-57487",{"data-item-key":"CVE-2026-57487","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-57487"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in upnp/src/genlib/net/http/httpparser.c to leave parser->content_length at zero while parser_parse_chunky_entity and parser_parse_chunky_body accumulate decoded bytes in..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-57487","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 96:["$","article","CVE-2026-57486",{"data-item-key":"CVE-2026-57486","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-57486"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespaced attributes created by ixmlDocument_createAttribute legitimately leave those..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-57486","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 97:["$","article","CVE-2026-48741",{"data-item-key":"CVE-2026-48741","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-48741"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in src/mms/iso_mms/server/mms_read_service.c does not validate an alternate-access sub-array range when numberOfElements is greater than zero...."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-48741","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 98:["$","article","CVE-2026-48503",{"data-item-key":"CVE-2026-48503","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-48503"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/iso_mms/server/mms_file_service.c accepts an out-of-range initialPosition in fileOpen and stores it in the file-read state. The..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-48503","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 99:["$","article","CVE-2026-46472",{"data-item-key":"CVE-2026-46472","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-46472"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past the end of a global array, potentially leading to information disclosure."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-46472","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 9a:["$","article","CVE-2026-42270",{"data-item-key":"CVE-2026-42270","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-42270"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, star-rating/images/ and dashboards/images/screenshots/ are among public image and screenshot routes using the local fs storage backend that call getStream and pipe filesystem streams to HTTP responses..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-42270","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 9b:["$","article","CVE-2026-41582",{"data-item-key":"CVE-2026-41582","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-41582"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, public image and screenshot routes implemented in frontend/express/app.js, plugins/star-rating/frontend/app.js, and plugins/dashboards/frontend/app.js concatenate attacker-controlled wildcard paths without..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-41582","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 9c:["$","article","CVE-2026-102941",{"data-item-key":"CVE-2026-102941","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[["$","span","código aberto",{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-surface-raised text-ink-muted border-border","children":"código aberto"}]]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-102941"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url[:nPath] before the len(url) >= nPath guard. A short destination causes a slice-bounds panic when the loop reaches a..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-102941","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 9d:["$","article","CVE-2026-107621",{"data-item-key":"CVE-2026-107621","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-107621"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-107621","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 9e:["$","article","CVE-2026-105667",{"data-item-key":"CVE-2026-105667","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-105667"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge does not reverse this."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-105667","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] 9f:["$","article","CVE-2026-105273",{"data-item-key":"CVE-2026-105273","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-105273"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-105273","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a0:["$","article","CVE-2026-101021",{"data-item-key":"CVE-2026-101021","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-101021"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-101021","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a1:["$","article","CVE-2026-63618",{"data-item-key":"CVE-2026-63618","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-63618"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-63618","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a2:["$","article","CVE-2026-107564",{"data-item-key":"CVE-2026-107564","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-107564"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-107564","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a3:["$","article","CVE-2026-105958",{"data-item-key":"CVE-2026-105958","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-105958"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC_MIGRATE_DATA messages without bounds validation, allowing a malicious authenticated SPICE client during VM live migration to read arbitrary heap memory or trigger heap corruption via out-of-bounds read and..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-105958","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a4:["$","article","CVE-2026-105959",{"data-item-key":"CVE-2026-105959","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-105959"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing a malicious authenticated SPICE client during VM live migration to trigger a massive heap buffer overflow by sending a crafted max_encoders value in migration..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-105959","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a5:["$","article","CVE-2026-92766",{"data-item-key":"CVE-2026-92766","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-92766"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-92766","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a6:["$","article","CVE-2026-14177",{"data-item-key":"CVE-2026-14177","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-14177"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting. This issue affects ikas E-Commerce Infrastructure: through 2026-07-13."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-14177","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a7:["$","article","CVE-2026-103896",{"data-item-key":"CVE-2026-103896","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-103896"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache::get_cache_file_dir() function concatenating raw, unsanitized $_GET parameter..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-103896","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a8:["$","article","CVE-2026-111114",{"data-item-key":"CVE-2026-111114","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111114"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the `/?reset-view` handler in `role_switcher_to_view_admin_as()` performs no nonce or capability check when..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111114","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] a9:["$","article","CVE-2026-110590",{"data-item-key":"CVE-2026-110590","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-110590"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to access any order's secret order_key..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-110590","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] aa:["$","article","CVE-2026-109400",{"data-item-key":"CVE-2026-109400","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109400"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via `add_management_page()` using a role name returned by `InstaWP_Setting::get_allowed_role()` as the..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109400","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] ab:["$","article","CVE-2026-107746",{"data-item-key":"CVE-2026-107746","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-107746"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.16.0.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-107746","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] ac:["$","article","CVE-2026-107659",{"data-item-key":"CVE-2026-107659","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-107659"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.11 via the 'id (post ID in /wp-json/wp/v2/modula-gallery/{id}) or none for collection route' parameter. This makes it possible for unauthenticated..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-107659","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] ad:["$","article","CVE-2026-103525",{"data-item-key":"CVE-2026-103525","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-103525"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.7.0 via the 'order_id + billing_address_id (also shipping_address_id)' parameter due to missing validation on a user controlled key. This..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-103525","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] ae:["$","article","CVE-2026-111378",{"data-item-key":"CVE-2026-111378","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.5"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111378"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffer growth before NLA..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111378","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] af:["$","article","CVE-2026-111691",{"data-item-key":"CVE-2026-111691","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.4"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111691"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege level by sending an unsigned X-USERINFO header. Attackers reaching backend service ports directly, bypassing the gateway, can forge companyid and manager or admin usertype values..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111691","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b0:["$","article","CVE-2026-111675",{"data-item-key":"CVE-2026-111675","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.4"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111675"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute force 6-digit SMS/email verification codes, which are never invalidated or attempt-limited. Attackers who know a victim's phone or email can trigger a code and..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111675","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b1:["$","article","CVE-2026-110135",{"data-item-key":"CVE-2026-110135","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.4"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-110135"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 does not adequately limit one-time-password verification attempts, because the attempt limit is tracked against a value the client itself supplies and can change freely, allowing an unauthenticated attacker to bypass the limit and brute-force the short..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-110135","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b2:["$","article","CVE-2026-111644",{"data-item-key":"CVE-2026-111644","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.3"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111644"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the get_current_user dependency. Attackers can read audit logs with login IPs, server logs and environment..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111644","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b3:["$","article","CVE-2026-111381",{"data-item-key":"CVE-2026-111381","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.3"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111381"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculation. Attackers can craft a persistent cache v2 file with oversized width and height values that causes mismatched entry..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111381","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b4:["$","article","CVE-2026-111379",{"data-item-key":"CVE-2026-111379","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.3"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111379"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Attackers can set large width and height values that wrap the size calculation in persist_cache_get_data, causing fread to..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111379","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b5:["$","article","CVE-2026-111627",{"data-item-key":"CVE-2026-111627","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111627"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"HestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER administrators to perform write actions while impersonating the protected ROOT_USER account. Attackers can log in via the loginas parameter and POST to /add/cron/, because the read-only flag is never checked, causing crond..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111627","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b6:["$","article","CVE-2026-86008",{"data-item-key":"CVE-2026-86008","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-86008"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure allows a domain..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-86008","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b7:["$","article","CVE-2026-92263",{"data-item-key":"CVE-2026-92263","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-92263"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint interpolates an uploaded filename into a shell command. An authenticated global administrator uploads a restore archive with a crafted filename. The administrator can supply a..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-92263","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b8:["$","article","CVE-2026-107648",{"data-item-key":"CVE-2026-107648","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-107648"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action (also function, plugin, post_type, post_status, ids, loggedout, and POST post_title)' parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-107648","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] b9:["$","article","CVE-2026-96768",{"data-item-key":"CVE-2026-96768","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-96768"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The GoSMTP Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Email Log Body in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-96768","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] ba:["$","article","CVE-2026-109224",{"data-item-key":"CVE-2026-109224","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109224"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.9.4 due to insufficient input sanitization and output escaping...."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109224","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] bb:["$","article","CVE-2026-87111",{"data-item-key":"CVE-2026-87111","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-87111"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Referer Header in all versions up to, and including, 6.2.9 due to insufficient input sanitization and output escaping. This makes it possible..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-87111","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] bc:["$","article","CVE-2026-97640",{"data-item-key":"CVE-2026-97640","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-97640"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS) in all versions up to, and including, 1.1.9 due to insufficient..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-97640","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] bd:["$","article","CVE-2026-110701",{"data-item-key":"CVE-2026-110701","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-110701"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'CalendarTitle' parameter in all versions up to, and including, 1.4.42 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-110701","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] be:["$","article","CVE-2026-109193",{"data-item-key":"CVE-2026-109193","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109193"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109193","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] bf:["$","article","CVE-2026-107768",{"data-item-key":"CVE-2026-107768","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-107768"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.3.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-107768","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c0:["$","article","CVE-2026-96570",{"data-item-key":"CVE-2026-96570","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-96570"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-96570","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c1:["$","article","CVE-2026-95809",{"data-item-key":"CVE-2026-95809","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-95809"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping...."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-95809","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c2:["$","article","CVE-2026-95686",{"data-item-key":"CVE-2026-95686","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-95686"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping. This..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-95686","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c3:["$","article","CVE-2026-89051",{"data-item-key":"CVE-2026-89051","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-89051"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replaceHeadersAndTags' function in versions up to, and including, 7.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-89051","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c4:["$","article","CVE-2026-111122",{"data-item-key":"CVE-2026-111122","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111122"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href' parameter in all versions up to, and including, 1.6.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111122","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c5:["$","article","CVE-2026-109513",{"data-item-key":"CVE-2026-109513","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109513"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 3.3.3 due to insufficient input sanitization..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109513","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c6:["$","article","CVE-2026-109232",{"data-item-key":"CVE-2026-109232","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109232"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln[]' parameter in all versions up to, and including, 10.31.9 due to insufficient input sanitization and output escaping. This makes it possible..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109232","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c7:["$","article","CVE-2026-107764",{"data-item-key":"CVE-2026-107764","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-107764"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'url (comment_author_url)' parameter in all versions up to, and including, 1.6.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-107764","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c8:["$","article","CVE-2026-104000",{"data-item-key":"CVE-2026-104000","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-104000"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-104000","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] c9:["$","article","CVE-2026-103999",{"data-item-key":"CVE-2026-103999","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-103999"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File Upload in all versions up to, and including, 3.5.54 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-103999","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] ca:["$","article","CVE-2026-100186",{"data-item-key":"CVE-2026-100186","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-100186"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via First Name Field in all versions up to, and including, 4.0.3 due to insufficient input sanitization and output escaping. This makes it possible for..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-100186","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] cb:["$","article","CVE-2026-109998",{"data-item-key":"CVE-2026-109998","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109998"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109998","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] cc:["$","article","CVE-2026-97339",{"data-item-key":"CVE-2026-97339","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-97339"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter in all versions up to, and including, 7.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-97339","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] cd:["$","article","CVE-2026-109990",{"data-item-key":"CVE-2026-109990","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109990"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109990","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] ce:["$","article","CVE-2026-109207",{"data-item-key":"CVE-2026-109207","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-109207"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media:thumbnail@url' parameter in all versions up to, and including, 5.2.11 due to insufficient input sanitization and output escaping. This makes..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-109207","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] cf:["$","article","CVE-2026-107758",{"data-item-key":"CVE-2026-107758","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.2"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-107758"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.0.390 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-107758","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d0:["$","article","CVE-2026-108372",{"data-item-key":"CVE-2026-108372","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-108372"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/status_server.py` uses `StatusRequestHandler._send_json()` and `do_OPTIONS()` to send `Access-Control-Allow-Origin: *` for unauthenticated..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-108372","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d1:["$","article","CVE-2026-59963",{"data-item-key":"CVE-2026-59963","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-59963"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-59963","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d2:["$","article","CVE-2026-111700",{"data-item-key":"CVE-2026-111700","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111700"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v3/en_US/eql, escaping the unsanitized EqlBuilder SQL interpolation to read..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111700","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d3:["$","article","CVE-2026-111695",{"data-item-key":"CVE-2026-111695","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111695"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to access other workspaces' datasources by numeric id. Attackers can send foreign sequential ids to /datasource/detail, /listSchemaTable, /tableDetail, /update or..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111695","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d4:["$","article","CVE-2026-111671",{"data-item-key":"CVE-2026-111671","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111671"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy other users' notebooks and services by id. Attackers can pass sequential ids to lifecycle endpoints in view_notebook.py, view_inferenceserving.py and..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111671","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d5:["$","article","CVE-2026-111607",{"data-item-key":"CVE-2026-111607","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111607"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another merchant application's payment channel configuration by supplying a victim infoId to MchPayInterfaceConfigController.saveOrUpdate. Attackers holding the default..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111607","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d6:["$","article","CVE-2026-77474",{"data-item-key":"CVE-2026-77474","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-77474"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested or unclosed substitutions are recursively rescanned after an inner scan returns unterminated, producing exponential-time work. The affected scanners are reached..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-77474","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d7:["$","article","CVE-2026-57488",{"data-item-key":"CVE-2026-57488","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-57488"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values greater than INT_MAX can..."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-57488","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d8:["$","article","CVE-2026-111396",{"data-item-key":"CVE-2026-111396","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-111396"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager: from n/a through 4.5.6."}],["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 mt-auto pt-3 text-xs text-ink-muted","children":[false,null,["$","a",null,{"href":"https://nvd.nist.gov/vuln/detail/CVE-2026-111396","target":"_blank","rel":"noopener noreferrer","className":"text-accent hover:text-ink font-semibold inline-flex items-center gap-1.5 ml-auto min-h-6","children":["Fonte oficial ",["$","svg",null,{"stroke":"currentColor","fill":"currentColor","strokeWidth":"0","viewBox":"0 0 512 512","className":"text-[10px]","children":["$undefined",[["$","path","0",{"d":"M432,320H400a16,16,0,0,0-16,16V448H64V128H208a16,16,0,0,0,16-16V80a16,16,0,0,0-16-16H48A48,48,0,0,0,0,112V464a48,48,0,0,0,48,48H400a48,48,0,0,0,48-48V336A16,16,0,0,0,432,320ZM488,0h-128c-21.37,0-32.05,25.91-17,41l35.73,35.73L135,320.37a24,24,0,0,0,0,34L157.67,377a24,24,0,0,0,34,0L435.28,133.32,471,169c15,15,41,4.5,41-17V24A24,24,0,0,0,488,0Z","children":[]}]]],"style":{"color":"$undefined"},"height":"1em","width":"1em","xmlns":"http://www.w3.org/2000/svg"}]]}]]}]]}] d9:["$","article","CVE-2026-101300",{"data-item-key":"CVE-2026-101300","data-item-date":"2026-10-16","tabIndex":0,"aria-haspopup":"dialog","className":"flex flex-col min-w-0 card p-4 sm:p-5 cursor-pointer hover:border-border-strong focus-visible:outline-hidden focus-visible:ring-2 focus-visible:ring-accent transition-colors ","children":[["$","div",null,{"className":"flex items-start justify-between gap-3 mb-2","children":[["$","div",null,{"className":"flex flex-wrap items-center gap-1.5","children":[false,["$","span",null,{"className":"text-xs font-semibold px-2.5 py-0.5 rounded-full border whitespace-nowrap bg-warn-soft text-warn border-warn","children":["Alta"," · CVSS 7.1"]}],false,[]]}],["$","span",null,{"className":"text-xs text-ink-muted font-medium whitespace-nowrap pt-0.5","children":"NVD"}]]}],["$","p",null,{"className":"font-mono text-sm text-accent font-semibold","children":"CVE-2026-101300"}],"",null,["$","p",null,{"className":"text-ink-muted text-sm mt-2 leading-relaxed wrap-break-word line-clamp-3","children":"Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the

16 de outubro de 2026

Altas

kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

lopdf has a stack overflow via deeply nested PDF objects