Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121735 | low | 3.7 | No | blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm acco... | 2026-11-03 |
| CVE-2026-121734 | medium | 6.5 | No | ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspac... | 2026-11-03 |
| CVE-2026-121732 | low | 2.7 | No | RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scoped administrators to assign fees and payments... | 2026-11-03 |
| CVE-2026-12489 | medium | 6.5 | No | An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could al... | 2026-11-03 |
| CVE-2026-121731 | high | 8.8 | No | RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including parents, to inject SQL... | 2026-11-03 |
| CVE-2026-121730 | medium | 6.5 | No | emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members... | 2026-11-03 |
| CVE-2026-121728 | medium | 5.3 | No | SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to register... | 2026-11-03 |
| CVE-2026-121727 | high | 7.5 | No | Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass... | 2026-11-03 |
| CVE-2026-121582 | medium | 6.5 | No | A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the componen... | 2026-11-03 |
| CVE-2026-121581 | medium | 4.3 | No | A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an unknown function of the file /api/v1/providers/{i... | 2026-11-03 |
| CVE-2026-121628 | low | 3.7 | No | Bagisto before 2.3.16 and 2.4.x before 2.4.1 contains a race condition vulnerability in manageCartRule() that allows attackers to redeem sin... | 2026-11-03 |
| CVE-2026-121624 | medium | 6.8 | No | Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper certificate validation vulnerability that allows adjacent a... | 2026-11-03 |
| CVE-2026-121539 | medium | 6.3 | No | A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the f... | 2026-11-03 |
| CVE-2026-121520 | not reported | — | No | In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an e... | 2026-11-03 |
| CVE-2026-121531 | medium | 6.3 | No | A vulnerability has been found in Umami 3.3.x/3.4.0/3.4.1. This affects an unknown part of the file src/app/api/auth/login/route.ts of the c... | 2026-11-03 |
| CVE-2026-121509 | medium | 5.3 | No | A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress. This affects the function get_required_post_data of the... | 2026-11-03 |
| CVE-2026-120775 | high | 7.2 | No | Tanium addressed a heap-based buffer overflow vulnerability in Deploy. | 2026-11-03 |
| CVE-2026-118237 | not reported | — | No | An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). When proving possession of a hos... | 2026-11-03 |
| CVE-2026-116669 | medium | 6.5 | No | Tanium addressed an improper access controls vulnerability in Discover. | 2026-11-03 |
| CVE-2026-121263 | medium | 6.3 | No | A vulnerability was determined in phpMyAdmin MoTranslator up to 6.0.1. The impacted element is the function Loader::getTranslator of the fil... | 2026-11-03 |