VulnSea

Daily digest · in progress

Thursday 1 October 2026

A quiet day: only 1 new CVEs against a recent average of about 475 so far. Severity skewed high: 1 high, 100% of the total.

1
New CVEs
0
Critical
0
KEV additions
3
Records changed

New this day, ranked by depth score

The 1 that matter most of the 1 published.

CVE-2026-103530High· 7.3
today

A vulnerability was detected in decolua 9Router up to 0.5.55

A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provider_optio…

▾ Twilightdecolua · 9Routervia NVD

Most-changed records

Existing CVEs whose severity, score, KEV or exploitation status moved.

  • CVE-2019-9901EnvoyProxy Envoy Missing HTTP URL path normalization56
  • CVE-2025-71348Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config45
  • CVE-2014-6407Arbitrary Code Execution in Docker41

Most-affected vendors

By CVEs published in the period.