Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-114264 | medium | 4.7 | No | A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of... | 2026-10-28 |
| CVE-2026-114143 | not reported | — | No | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every path prefix in lib/... | 2026-10-28 |
| CVE-2026-114139 | not reported | — | No | Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for... | 2026-10-28 |
| CVE-2026-114135 | high | 8.8 | No | Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced the normal KernelWeb... | 2026-10-28 |
| CVE-2026-114130 | not reported | — | No | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows an application with... | 2026-10-28 |
| CVE-2026-114261 | high | 7.3 | No | A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function inde... | 2026-10-28 |
| CVE-2026-114258 | high | 7.3 | No | A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue... | 2026-10-28 |
| CVE-2026-114255 | high | 7.3 | No | A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the... | 2026-10-28 |
| CVE-2026-114126 | not reported | — | No | Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and... | 2026-10-28 |
| CVE-2026-114122 | low | 3.9 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 4... | 2026-10-28 |
| CVE-2026-113798 | medium | 5.4 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 4... | 2026-10-28 |
| CVE-2026-111809 | critical | 9.3 | No | Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encoding. This issue affects Apache... | 2026-10-28 |
| CVE-2026-5821 | high | 8.1 | No | The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insu... | 2026-10-28 |
| CVE-2026-11592 | medium | 4.3 | No | The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerab... | 2026-10-28 |
| CVE-2026-18326 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-114252 | medium | 6.3 | No | A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is... | 2026-10-27 |
| CVE-2026-114387 | high | 8.8 | No | Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only access_dashboard t... | 2026-10-27 |
| CVE-2026-112155 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-111563 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-111479 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |