Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111329 | critical | 9.8 | No | JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access... | 2026-10-16 |
| CVE-2026-111321 | medium | 5.4 | No | TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send ar... | 2026-10-16 |
| CVE-2026-111320 | medium | 6.5 | No | ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backen... | 2026-10-16 |
| CVE-2026-111272 | medium | 5.5 | No | LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read past a short S... | 2026-10-16 |
| CVE-2026-111271 | medium | 5.5 | No | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows... | 2026-10-16 |
| CVE-2026-111234 | medium | 5.9 | No | SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:/... | 2026-10-16 |
| CVE-2026-111172 | medium | 5.3 | No | @casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() that allows attackers to modify inherited b... | 2026-10-16 |
| CVE-2026-111171 | medium | 5.4 | No | Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() doe... | 2026-10-16 |
| CVE-2026-111168 | medium | 5.4 | No | LibreDesk before 2.9.0-rc.8 contains a stored cross-site scripting vulnerability that allows authenticated agents to execute script by uploa... | 2026-10-16 |
| CVE-2026-111167 | medium | 6.1 | No | GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers t... | 2026-10-16 |
| CVE-2026-111166 | medium | 5.5 | No | libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allo... | 2026-10-16 |
| CVE-2026-111163 | medium | 5.5 | No | WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when han... | 2026-10-16 |
| CVE-2026-111162 | medium | 6.1 | No | WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseNewHmp() that allows attackers to read be... | 2026-10-16 |
| CVE-2026-111161 | medium | 6.1 | No | libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW_MidiSequencer that allows attackers to... | 2026-10-16 |
| CVE-2026-111158 | medium | 5.5 | No | EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_detect() in parseutils.c that reads past truncated... | 2026-10-16 |
| CVE-2026-111156 | medium | 6.1 | No | libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in src/sndfont.c that allows attackers to corru... | 2026-10-16 |
| CVE-2026-111153 | medium | 5.5 | No | Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers... | 2026-10-16 |
| CVE-2026-111152 | medium | 5.5 | No | Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integ... | 2026-10-16 |
| CVE-2026-111151 | medium | 6.1 | No | OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup-pass decoder that allows attackers to corrupt... | 2026-10-16 |
| CVE-2026-111148 | medium | 5.5 | No | libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/... | 2026-10-16 |