Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-34567 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34565 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34564 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34563 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34456 | critical | 9.8 | No | Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go. From version 26.2.0-beta.1 t... | 2026-10-26 |
| CVE-2026-34072 | critical | 9.8 | No | Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs. Prior to version 2... | 2026-10-26 |
| CVE-2026-34430 | critical | 9.6 | No | ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to ex... | 2026-10-26 |
| CVE-2026-33994 | critical | 9.8 | No | Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Starting in version 2.0.39 and prior to versio... | 2026-10-26 |
| CVE-2026-33879 | critical | 9.8 | No | Federated Learning and Interoperability Platform (FLIP) is an open-source platform for federated training and evaluation of medical imaging... | 2026-10-26 |
| CVE-2026-34475 | critical | 9.8 | No | Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of /... | 2026-10-26 |
| CVE-2026-33765 | critical | 9.8 | No | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions prio... | 2026-10-26 |
| CVE-2026-34387 | critical | 9.8 | No | Fleet is open source device management software. Prior to 4.81.1, a command injection vulnerability in Fleet's software installer pipeline a... | 2026-10-26 |
| CVE-2026-4619 | critical | 9.8 | No | Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network. | 2026-10-26 |
| CVE-2026-0578 | critical | 9.8 | No | A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality... | 2026-10-26 |
| CVE-2025-57231 | high | 7.5 | No | Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request... | 2026-10-26 |
| CVE-2026-32201 | medium | 6.5 | Listed | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 2026-10-26 |
| CVE-2026-34197 | high | 8.8 | Listed | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveM... | 2026-10-26 |
| CVE-2026-34486 | high | 7.5 | Listed | Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInte... | 2026-10-26 |
| CVE-2026-91625 | high | 8.2 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |
| CVE-2026-91623 | high | 7.4 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |