Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116201 | high | 8.8 | No | Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-... | 2026-10-29 |
| CVE-2026-116185 | medium | 5.0 | No | OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read other realms' gateway t... | 2026-10-29 |
| CVE-2026-116112 | high | 7.3 | No | A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected el... | 2026-10-29 |
| CVE-2026-116109 | medium | 6.3 | No | A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of... | 2026-10-29 |
| CVE-2026-116106 | high | 7.3 | No | A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of... | 2026-10-29 |
| CVE-2026-116103 | medium | 6.3 | No | A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python... | 2026-10-29 |
| CVE-2026-116100 | low | 2.4 | No | A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the com... | 2026-10-29 |
| CVE-2026-116097 | medium | 4.3 | No | A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addnewstudent.php. Such m... | 2026-10-29 |
| CVE-2026-116094 | high | 7.3 | No | A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file application/function.php.... | 2026-10-29 |
| CVE-2026-116061 | high | 7.3 | No | A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opil... | 2026-10-29 |
| CVE-2026-116057 | medium | 6.3 | No | A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file ap... | 2026-10-29 |
| CVE-2026-116054 | low | 2.2 | No | A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módulo de Arrecadação.... | 2026-10-29 |
| CVE-2026-114490 | high | 7.8 | No | Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the se... | 2026-10-29 |
| CVE-2026-114489 | high | 8.1 | No | Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authentic... | 2026-10-29 |
| CVE-2026-114478 | medium | 5.9 | No | Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unau... | 2026-10-29 |
| CVE-2026-114477 | medium | 4.3 | No | Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authenticated user who... | 2026-10-29 |
| CVE-2026-114476 | high | 7.5 | No | Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated us... | 2026-10-29 |
| CVE-2026-114475 | medium | 6.5 | No | Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated... | 2026-10-29 |
| CVE-2026-10031 | medium | 5.4 | No | SFTPGo prior to 2.7.4 contains a permission bypass vulnerability that allows authenticated users to circumvent per-directory access controls... | 2026-10-29 |
| CVE-2026-114474 | medium | 5.9 | No | Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 a... | 2026-10-29 |