Daily digest · in progress
Sunday 18 October 2026
No new CVEs landed this day so far. 3 existing records changed (re-scores, KEV additions, exploit evidence).
0
New CVEs
0
Critical
0
KEV additions
3
Records changed
Most-changed records
Existing CVEs whose severity, score, KEV or exploitation status moved.
- CVE-2026-93616A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.epss94
- CVE-2026-92956vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox when running on Node.js 26exploit_available67
- CVE-2026-91737Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pageexploit_available60