3 vulnerabilities across 3 products scored HIGH or above on October 03, 2026.

  • 🟠 HIGH: 3

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-76504 (cisco/catalyst_sd-wan_manager) — F1: exploitable → functional, AAS: 10.9 → 13.4 (HIGH → CRITICAL). Originally in 2026-09-30 bulletin.
  • [UPGRADED] CVE-2026-100752 (ordasoft.com/real_estate_manager_(free)_extension_for_joomla) — F1: exploitable → functional, AAS: 9.2 → 11.2 (HIGH → HIGH). Originally in 2026-09-28 bulletin.
  • [UPGRADED] CVE-2026-82901 (themefic/ultra_addons_for_contact_form_7) — F1: exploitable → functional, AAS: 10.1 → 12.1 (HIGH → CRITICAL). Originally in 2026-09-26 bulletin.

🟠 [HIGH] beaverbuilder/beaver_builder_page_builder_–_drag_and_drop_website_builder

1 CVE | CVSS 3.1: 9.1 | AAS 9.4

  • cpe:2.3:a:beaverbuilder:beaver_builder_page_builder_drag_and_drop_website_builder:*:*:*:*:*:*:*:*

Beaver Builder Page Builder, a popular drag-and-drop website builder plugin for WordPress, is affected by one high-severity vulnerability (CVE-2026-92084, CVSS 9.1). The flaw allows unauthenticated attackers to execute arbitrary shortcodes due to insufficient input validation when processing actions tied to the Sidebar module, potentially enabling a range of attacks depending on the shortcodes available on the target site. All versions up to and including 2.11.0.5 are affected.

WordPress administrators running Beaver Builder should update to the latest patched version immediately. Because exploitation requires no authentication and only needs a page using the Sidebar module, sites with public-facing Beaver Builder content are particularly at risk. Review the vendor advisory for technical details and confirm your deployment is running a fixed release.

Vendor Advisory

🟠 [HIGH] nasa-ammos/ait-core

1 CVE | CVSS 3.1: 9.8 | AAS 9.1

  • cpe:2.3:a:nasa-ammos:ait-core:*:*:*:*:*:*:*:*

NASA-AMMOS AIT-Core, a ground system toolkit used for spacecraft telemetry and commanding, is affected by one critical vulnerability (CVE-2026-105105, CVSS 9.8). The ait-server ZeroMQ message broker binds to all network interfaces by default with no authentication, allowing any unauthenticated attacker with network access to inject spacecraft commands, exfiltrate telemetry and command traffic, inject forged telemetry data, or disrupt the entire command and telemetry bus. All versions through 3.1.1 are affected.

Organizations operating AIT-Core in mission environments should treat this as an urgent priority given the potential for direct impact to spacecraft command integrity. Restrict network access to the ZeroMQ broker interfaces immediately through firewall rules or network segmentation, and monitor the vendor repository for a patched release. Any deployment where the broker ports are reachable from untrusted networks should be considered at risk of active exploitation.

Vendor Advisory

🟠 [HIGH] ultimate_member/ultimate_member

1 CVE | CVSS 3.1: 8.8 | AAS 9.1

  • cpe:2.3:a:ultimate_member:ultimate_member:*:*:*:*:*:*:*:* (< 2.13.2)

Ultimate Member, a widely used WordPress membership and user profile plugin, is affected by one high-severity vulnerability (CVE-2026-96451, CVSS 8.8). The flaw is an authorization bypass through a user-controlled key that enables privilege escalation, meaning an authenticated attacker can elevate their access to higher-privileged roles such as administrator. All versions through 2.13.1 are affected.

WordPress site administrators using Ultimate Member should update to a patched version immediately and audit existing user accounts for any unauthorized role changes. Given this plugin’s popularity and the straightforward nature of privilege escalation flaws, exploitation in the wild is a realistic concern. Refer to the Patchstack advisory for additional technical details and remediation guidance.

Vendor Advisory