Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-61708 | high | 8.5 | No | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `POST /api/agent_da... | 2026-10-30 |
| CVE-2026-45145 | high | 7.5 | No | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, `public/main/inc/lib/career.lib.php` and `public/main/cron/import_... | 2026-10-30 |
| CVE-2026-45141 | medium | 6.5 | No | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, the `add`, `delete_gradebook_from_skill`, `save_profile`, and `del... | 2026-10-30 |
| CVE-2026-61707 | critical | 9.0 | No | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported dep... | 2026-10-30 |
| CVE-2026-119278 | medium | 5.9 | No | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7 and 3.4.5, duri... | 2026-10-30 |
| CVE-2026-101209 | low | 2.7 | No | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker... | 2026-10-30 |
| CVE-2025-66208 | critical | 9.8 | No | Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabor... | 2026-10-30 |
| CVE-2026-110447 | critical | 9.8 | Listed | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in th... | 2026-10-30 |
| CVE-2026-97645 | high | 7.2 | No | The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via List Field in all versions up to, and including, 3.1... | 2026-10-30 |
| CVE-2026-94140 | critical | 9.1 | No | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=... | 2026-10-30 |
| CVE-2026-92210 | high | 7.2 | No | NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arb... | 2026-10-30 |
| CVE-2026-92207 | high | 8.8 | No | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code... | 2026-10-30 |
| CVE-2026-92206 | high | 8.8 | No | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e... | 2026-10-30 |
| CVE-2026-92205 | medium | 6.1 | No | BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create a... | 2026-10-30 |
| CVE-2026-92204 | high | 7.7 | No | Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability all... | 2026-10-30 |
| CVE-2026-92203 | high | 7.7 | No | Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability a... | 2026-10-30 |
| CVE-2026-65444 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes Blocksy Companion bloc... | 2026-10-30 |
| CVE-2026-82987 | high | 7.5 | No | There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated atta... | 2026-10-30 |
| CVE-2026-62146 | high | 7.8 | No | A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox... | 2026-10-30 |
| CVE-2026-61576 | not reported | — | No | Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook `POST /api/v1/proje... | 2026-10-30 |