Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106113 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image and applying... | 2026-10-24 |
| CVE-2026-106114 | medium | 5.3 | No | ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared ch... | 2026-10-24 |
| CVE-2026-106115 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even th... | 2026-10-24 |
| CVE-2026-106116 | medium | 5.3 | No | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates... | 2026-10-24 |
| CVE-2026-110734 | low | 2.5 | No | Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The r... | 2026-10-24 |
| CVE-2026-9869 | critical | 9.1 | No | A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0... | 2026-10-23 |
| CVE-2026-9827 | critical | 9.1 | No | A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202504... | 2026-10-23 |
| CVE-2026-9817 | critical | 9.1 | No | A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-... | 2026-10-23 |
| CVE-2026-9814 | critical | 9.1 | No | An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2... | 2026-10-23 |
| CVE-2026-9660 | critical | 9.1 | No | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X... | 2026-10-23 |
| CVE-2026-42026 | critical | 9.1 | No | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)... | 2026-10-23 |
| CVE-2026-42025 | critical | 9.1 | No | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s)... | 2026-10-23 |
| CVE-2026-114263 | high | 7.3 | No | A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of... | 2026-10-23 |
| CVE-2026-42024 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X... | 2026-10-23 |
| CVE-2026-42023 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X... | 2026-10-23 |
| CVE-2026-42022 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X... | 2026-10-23 |
| CVE-2026-42021 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X... | 2026-10-23 |
| CVE-2026-35499 | critical | 9.1 | No | An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250... | 2026-10-23 |
| CVE-2026-110814 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-23 |
| CVE-2026-114260 | medium | 6.5 | No | A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability af... | 2026-10-23 |