Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112077 | medium | 5.6 | No | A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. This issue affects the function r_core_cmd_str_pipe in the library libr/core/... | 2026-10-22 |
| CVE-2026-112073 | medium | 6.3 | No | A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the functio... | 2026-10-22 |
| CVE-2026-112059 | medium | 6.1 | No | libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size... | 2026-10-22 |
| CVE-2026-112054 | medium | 5.5 | No | Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying... | 2026-10-22 |
| CVE-2026-112049 | medium | 5.5 | No | Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write file... | 2026-10-22 |
| CVE-2026-112042 | low | 3.5 | No | A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This issue affects the function dmB... | 2026-10-22 |
| CVE-2026-112038 | low | 2.4 | No | A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the fu... | 2026-10-22 |
| CVE-2026-112034 | medium | 4.3 | No | A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function IController::redirect of the file... | 2026-10-22 |
| CVE-2026-112030 | medium | 6.3 | No | A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmData... | 2026-10-22 |
| CVE-2026-112026 | low | 3.7 | No | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b3893... | 2026-10-22 |
| CVE-2026-112020 | medium | 6.1 | No | LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in lodepng_util.cpp that la... | 2026-10-22 |
| CVE-2026-111936 | medium | 4.3 | No | Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in security.rs never che... | 2026-10-22 |
| CVE-2026-111883 | medium | 5.4 | No | Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistic... | 2026-10-22 |
| CVE-2026-111991 | medium | 6.3 | No | A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.__init__ of... | 2026-10-22 |
| CVE-2026-111986 | medium | 6.3 | No | A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file m... | 2026-10-22 |
| CVE-2026-112005 | high | 7.7 | No | WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by... | 2026-10-22 |
| CVE-2026-112000 | high | 7.6 | No | Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe... | 2026-10-22 |
| CVE-2026-107081 | critical | 9.8 | No | SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.p... | 2026-10-22 |
| CVE-2026-111877 | medium | 4.3 | No | A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of t... | 2026-10-22 |
| CVE-2026-111873 | high | 7.3 | No | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the fu... | 2026-10-22 |