Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-88941 | medium | 5.2 | No | Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentiall... | 2026-10-29 |
| CVE-2026-112356 | medium | 6.1 | No | GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the Webmail component that allows a... | 2026-10-29 |
| CVE-2026-61572 | high | 8.6 | No | AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_contents` in `objects/functions.php` accepts c... | 2026-10-29 |
| CVE-2026-61569 | high | 7.5 | No | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at `objects/login.json.php` passes the `user` paramet... | 2026-10-29 |
| CVE-2026-23705 | high | 7.2 | No | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For... | 2026-10-29 |
| CVE-2026-116641 | medium | 6.8 | No | The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However, the crypto/x509... | 2026-10-29 |
| CVE-2026-116052 | medium | 4.3 | No | A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipul... | 2026-10-29 |
| CVE-2026-116071 | medium | 5.9 | No | rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key i... | 2026-10-29 |
| CVE-2026-116067 | high | 8.2 | No | Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that let... | 2026-10-29 |
| CVE-2026-116048 | high | 7.3 | No | A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulner... | 2026-10-29 |
| CVE-2026-116045 | medium | 4.3 | No | A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file skills/motion-design... | 2026-10-29 |
| CVE-2026-116006 | high | 7.3 | No | A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file Au... | 2026-10-29 |
| CVE-2026-115999 | high | 7.3 | No | A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect o... | 2026-10-29 |
| CVE-2026-115995 | critical | 9.6 | No | A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume o... | 2026-10-29 |
| CVE-2026-115973 | high | 7.3 | No | A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendRese... | 2026-10-29 |
| CVE-2026-115970 | high | 7.3 | No | A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the comp... | 2026-10-29 |
| CVE-2026-116018 | medium | 4.3 | No | ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark... | 2026-10-29 |
| CVE-2026-100132 | medium | 4.3 | No | Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could lev... | 2026-10-29 |
| CVE-2026-83785 | high | 7.0 | No | Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83786 | medium | 4.7 | No | Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally. | 2026-10-29 |