What's exploited, and what to do.https://exploit-id.pages.dev/enhttps://exploit-id.pages.dev/cve/CVE-2026-21589/https://exploit-id.pages.dev/cve/CVE-2026-21589/An unauthenticated remote attacker can read specific files inside the web application root of Atlassian Data Center products, provided they already know the file's exact name and path. Affected products include Bamboo, Bitbucket, Confluence, Crowd, Crucible, Fisheye, Jira Service Management, and Jira Software Data CentMon, 26 Oct 2026 12:09:51 GMThttps://exploit-id.pages.dev/cve/CVE-2026-107656/https://exploit-id.pages.dev/cve/CVE-2026-107656/An attacker can bypass authentication with crafted HTTP requests to FortiSandbox 5.0.0 through 5.0.6, 4.4.0 through 4.4.9, 4.2 all versions, and FortiSandbox PaaS 5.0.0 through 5.0.6, 4.4 all versions, 4.2 all versions, and run unauthorized code or commands. The flaw scores CVSSv3.1 9.6 and is listed as none-observed fMon, 26 Oct 2026 18:12:01 GMThttps://exploit-id.pages.dev/cve/CVE-2026-109618/https://exploit-id.pages.dev/cve/CVE-2026-109618/An attacker who can exhaust PHP memory can turn the longjmp()-based out-of-memory path into remote code execution: multiple OOM strategies consistently leave request memory uninitialized before an allocation, and cleanup then reads or branches on it. PHP is affected; install the vendor fix from the php-src security advMon, 26 Oct 2026 08:26:56 GMThttps://exploit-id.pages.dev/cve/CVE-2026-116231/https://exploit-id.pages.dev/cve/CVE-2026-116231/An attacker can inject CRLF sequences into the ser2net component's regmsg argument on the Oray Pugongying X5 Pro router, remotely, and a public write-up claims this lets a serial banner newline overwrite existing files. Affected is version 7.6.1 of the Pugongying X5 Pro, scored CVSSv4.0 9.4, with exploitation observed Mon, 26 Oct 2026 17:50:54 GMThttps://exploit-id.pages.dev/cve/CVE-2026-116232/https://exploit-id.pages.dev/cve/CVE-2026-116232/An attacker can send a crafted SNMP request to the Oray Pugongying X5 Pro router (7.6.1) that injects CRLF characters through the info.community argument handled by snmp_set, hijacking the SNMP handler's response stream. The flaw is remotely reachable, a public proof of concept exists, and the vendor did not respond toMon, 26 Oct 2026 17:49:17 GMThttps://exploit-id.pages.dev/cve/CVE-2026-116233/https://exploit-id.pages.dev/cve/CVE-2026-116233/An attacker can inject CRLF characters into Dnsmasq directives by sending a crafted DHCP rent_time value to a remote Oray Pugongying X5 Pro router. The flaw hits Pugongying X5 Pro 7.6.1, no fixed version is published, so block untrusted networks from the router's DHCP and management interfaces. An exploit is public, exMon, 26 Oct 2026 18:01:01 GMThttps://exploit-id.pages.dev/cve/CVE-2026-116234/https://exploit-id.pages.dev/cve/CVE-2026-116234/An attacker can inject CRLF characters into the secproto argument handled by the IPsec Policy Handler, writing attacker-controlled lines into /etc/ipsec.conf on the Oray Pugongying X5 Pro router. The flaw is remotely reachable, carries a CVSSv4.0 score of 9.4, and a public exploit exists; a reference claims this chain Mon, 26 Oct 2026 17:52:11 GMThttps://exploit-id.pages.dev/cve/CVE-2026-116237/https://exploit-id.pages.dev/cve/CVE-2026-116237/An attacker can inject CRLF sequences into the Dnsmasq component of the Oray Pugongying X5 Pro router to run a root script, per the public writeup. The issue is rated CVSSv4.0 9.3 and is remotely reachable, but CISA KEV does not list it and exploitation is none-observed, with an EPSS score of 0.00663 (percentile 0.5140Mon, 26 Oct 2026 18:10:42 GMT