Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113604 | medium | 5.5 | No | Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unv... | 2026-10-20 |
| CVE-2026-113602 | medium | 5.3 | No | json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks b... | 2026-10-20 |
| CVE-2026-92162 | not reported | — | No | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems whe... | 2026-10-20 |
| CVE-2026-113356 | high | 7.5 | No | DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file contents to unseri... | 2026-10-20 |
| CVE-2026-113355 | medium | 4.8 | No | Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject JavaScript by craft... | 2026-10-20 |
| CVE-2026-113353 | medium | 5.4 | No | LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_edi... | 2026-10-20 |
| CVE-2026-113350 | medium | 5.4 | No | react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers to inject scripts by storing javascript... | 2026-10-20 |
| CVE-2026-110180 | medium | 4.8 | No | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8... | 2026-10-20 |
| CVE-2026-110095 | low | 3.7 | No | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4... | 2026-10-20 |
| CVE-2026-77936 | critical | 9.8 | No | Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API ro... | 2026-10-20 |
| CVE-2026-77935 | high | 8.3 | No | Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to acces... | 2026-10-20 |
| CVE-2026-77934 | high | 8.8 | No | Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow... | 2026-10-20 |
| CVE-2026-75128 | critical | 9.8 | No | Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication,... | 2026-10-20 |
| CVE-2026-109395 | critical | 9.1 | No | Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fa... | 2026-10-20 |
| CVE-2026-100747 | medium | 6.5 | No | Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-par... | 2026-10-20 |
| CVE-2026-113708 | critical | 9.9 | No | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize p... | 2026-10-20 |
| CVE-2026-28331 | medium | 4.4 | No | SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges. | 2026-10-20 |
| CVE-2026-28330 | medium | 4.6 | No | SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated... | 2026-10-20 |
| CVE-2026-28329 | medium | 6.4 | No | SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticate... | 2026-10-20 |
| CVE-2026-101201 | not reported | — | No | A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read. | 2026-10-20 |