CVE-2026-65173

NVIDIA Fixes 18 AI Software Flaws, Led by CVSS 10.0 Bug in AIStore NVIDIA AIStore vulnerabilities enabling remote code execution in AI storage and training tools

Do Son October 13, 2026

TL;DR NVIDIA released six security bulletins on October 13, 2026, fixing 18 flaws in its AI software...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

CVE-2026-104935CVSS 8.6
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands....
CISA KEV📅 Added to KEV: Oct 13, 2026
CVE-2026-96951CVSS 8.8
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker...
CISA KEV📅 Added to KEV: Oct 13, 2026
CVE-2026-102255CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intel📅 Updated: Oct 9, 2026
CVE-2026-105133CVSS 6.9
A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
Admin intel📅 Updated: Oct 9, 2026
CVE-2023-22894CVSS 4.9
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2016-3081CVSS 8.1
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-3306CVSS 10.0
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the...
CISA KEV📅 Added to KEV: Oct 8, 2026
CVE-2015-5477CVSS 7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial...
CISA KEV📅 Added to KEV: Oct 8, 2026

CVE-2026-108540CVSS 9.4
A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the...
📅 Updated: Oct 14, 2026
CVE-2026-110447CVSS 9.2
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
📅 Updated: Oct 14, 2026
CVE-2026-97657CVSS 9.8
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and...
📅 Updated: Oct 14, 2026
CVE-2026-110002CVSS 9.8
The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up...
📅 Updated: Oct 14, 2026
CVE-2026-97668CVSS 9.8
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart...
📅 Updated: Oct 14, 2026
CVE-2026-93388CVSS 9.8
The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading...
📅 Updated: Oct 14, 2026
CVE-2026-92097CVSS 9.1
The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up...
📅 Updated: Oct 14, 2026
CVE-2026-78797CVSS 9.8
An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id...
📅 Updated: Oct 14, 2026