Weekly digest — broader advisories (week of 2026-10-26)
Critical · CVSS 10.0 · fetched 2026-10-26
Weekly digest — broader advisories for the week of 2026-10-26. These items were verified against their canonical sources but are not PHP vulnerabilities, so the daily feed held them back; they are collected here for reference. The daily /threats feed publishes PHP-relevant items only. 1) Arista VeloCloud Orchestrator SQL Injection Vulnerability (CVE-2026-114625) — Critical · CVSS 9.9 · CISA KEV · CISA Known Exploited Vulnerabilities Catalog · fetched 2026-10-23 2) CVE-2026-109352 — Medium · CVSS 6.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-25 3) CVE-2026-53710 — Critical · CVSS 10.0 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 4) CVE-2026-59971 — Critical · CVSS 10.0 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 5) CVE-2026-61732 — Critical · CVSS 10.0 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 6) CVE-2026-77244 — Critical · CVSS 10.0 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 7) CVE-2026-101065 — Critical · CVSS 9.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 8) CVE-2026-105697 — Critical · CVSS 9.9 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 9) CVE-2026-105740 — Critical · CVSS 9.9 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 10) CVE-2026-108263 — Critical · CVSS 9.9 · NIST National Vulnerability Database (NVD) · fetched 2026-10-25 11) CVE-2026-109442 — Critical · CVSS 9.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 12) CVE-2026-109444 — Critical · CVSS 9.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 13) CVE-2026-111704 — Critical · CVSS 9.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 14) CVE-2026-114612 — Critical · CVSS 9.9 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 15) CVE-2026-51871 — Critical · CVSS 9.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 16) CVE-2026-57139 — Critical · CVSS 9.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 17) CVE-2026-61560 — Critical · CVSS 9.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 18) CVE-2026-90970 — Critical · CVSS 9.9 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 19) CVE-2026-61559 — Critical · CVSS 9.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 20) CVE-2026-61568 — Critical · CVSS 9.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 21) CVE-2026-87911 — Critical · CVSS 9.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 22) CVE-2026-54618 — Critical · CVSS 9.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 23) CVE-2026-57145 — Critical · CVSS 9.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 24) CVE-2026-77254 — Critical · CVSS 9.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 25) CVE-2026-54504 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 26) CVE-2026-54519 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 27) CVE-2026-57143 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 28) CVE-2026-57586 — High · CVSS 8.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 29) CVE-2026-58197 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 30) CVE-2026-71416 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 31) CVE-2026-77243 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 32) CVE-2026-77248 — High · CVSS 8.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 33) CVE-2026-77255 — High · CVSS 8.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 34) CVE-2026-77271 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 35) CVE-2026-78575 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 36) CVE-2026-81941 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 37) CVE-2026-90938 — High · CVSS 8.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 38) CVE-2026-105762 — High · CVSS 8.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 39) CVE-2026-54549 — High · CVSS 8.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 40) CVE-2026-55071 — High · CVSS 8.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 41) CVE-2026-55157 — High · CVSS 8.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 42) CVE-2026-59973 — High · CVSS 8.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 43) CVE-2026-91931 — High · CVSS 8.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 44) CVE-2026-91932 — High · CVSS 8.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 45) CVE-2026-91935 — High · CVSS 8.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 46) CVE-2026-104103 — High · CVSS 8.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 47) CVE-2026-109237 — High · CVSS 8.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 48) CVE-2026-115727 — High · CVSS 8.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 49) CVE-2026-54446 — High · CVSS 8.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 50) CVE-2026-54520 — High · CVSS 8.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 51) CVE-2026-57130 — High · CVSS 8.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 52) CVE-2026-63127 — High · CVSS 8.2 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 53) CVE-2026-77274 — High · CVSS 8.2 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 54) CVE-2026-77294 — High · CVSS 8.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 55) CVE-2026-91988 — High · CVSS 8.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 56) CVE-2026-19136 — High · CVSS 7.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 57) CVE-2026-103055 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 58) CVE-2026-107286 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 59) CVE-2026-107295 — High · CVSS 7.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-25 60) CVE-2026-108159 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 61) CVE-2026-108863 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 62) CVE-2026-114106 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 63) CVE-2026-50125 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 64) CVE-2026-50158 — High · CVSS 7.7 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 65) CVE-2026-53957 — High · CVSS 7.7 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 66) CVE-2026-58483 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 67) CVE-2026-63128 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 68) CVE-2026-73496 — High · CVSS 7.7 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 69) CVE-2026-77242 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 70) CVE-2026-77258 — High · CVSS 7.7 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 71) CVE-2026-77259 — High · CVSS 7.7 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 72) CVE-2026-77260 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 73) CVE-2026-99046 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 74) CVE-2026-18875 — High · CVSS 7.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 75) CVE-2026-54547 — High · CVSS 7.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 76) CVE-2026-56681 — High · CVSS 7.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 77) CVE-2026-77246 — High · CVSS 7.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 78) CVE-2026-90617 — High · CVSS 7.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 79) CVE-2026-105741 — High · CVSS 7.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 80) CVE-2026-105761 — High · CVSS 7.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 81) CVE-2026-114510 — High · CVSS 7.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 82) CVE-2026-58485 — High · CVSS 7.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 83) CVE-2026-61687 — High · CVSS 7.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 84) CVE-2026-77253 — High · CVSS 7.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 85) CVE-2026-77261 — High · CVSS 7.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 86) CVE-2025-71427 — Medium · CVSS 6.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 87) CVE-2026-107289 — Medium · CVSS 6.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 88) CVE-2026-55837 — Medium · CVSS 6.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 89) CVE-2026-64684 — Medium · CVSS 6.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 90) CVE-2026-90474 — Medium · CVSS 6.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 91) CVE-2026-93965 — Medium · CVSS 6.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 92) CVE-2026-94111 — Medium · CVSS 6.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 93) CVE-2026-107287 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 94) CVE-2026-107290 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 95) CVE-2026-107292 — Medium · CVSS 6.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 96) CVE-2026-107294 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 97) CVE-2026-107717 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 98) CVE-2026-108581 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 99) CVE-2026-108593 — Medium · CVSS 6.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 100) CVE-2026-108957 — Medium · CVSS 6.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-24 (List capped at 100 items; any remaining held items roll into next week's digest.)
Remediation
These advisories sit outside PHPatch's PHP patching scope. Follow each source advisory's own guidance — the canonical source for every item is named in the list above — and apply vendor updates where the source advisory directs.
Affected PHP branches
See the source advisory.
Source: PHPatch Threat Desk — weekly digest · retrieved 2026-10-26T09:00:09-04:00 · https://services.nvd.nist.gov/rest/json/cves/2.0