Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108184 | high | 7.4 | No | Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure v... | 2026-10-15 |
| CVE-2026-103083 | medium | 5.4 | No | Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attrib... | 2026-10-15 |
| CVE-2026-102946 | critical | 9.1 | No | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.4,... | 2026-10-15 |
| CVE-2026-66071 | medium | 6.5 | No | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 J... | 2026-10-15 |
| CVE-2025-14141 | critical | 9.8 | No | A flaw has been found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formArpBindConfig. Exec... | 2026-10-15 |
| CVE-2026-57847 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-15 |
| CVE-2026-57846 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-15 |
| CVE-2026-57844 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-15 |
| CVE-2026-66078 | medium | 5.5 | No | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, protected tag bypass via bulk-delet... | 2026-10-15 |
| CVE-2026-67222 | medium | 6.5 | No | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, mechanisms/1 applied list_to_atom/1 to e... | 2026-10-15 |
| CVE-2026-110374 | medium | 4.3 | No | Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured... | 2026-10-15 |
| CVE-2026-109689 | medium | 5.3 | No | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access C... | 2026-10-15 |
| CVE-2026-110890 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-f... | 2026-10-15 |
| CVE-2026-110371 | medium | 4.3 | No | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Cont... | 2026-10-15 |
| CVE-2026-110367 | medium | 5.3 | No | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access... | 2026-10-15 |
| CVE-2026-108175 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-... | 2026-10-15 |
| CVE-2026-103350 | medium | 5.3 | No | Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-fo... | 2026-10-15 |
| CVE-2026-110958 | critical | 10.0 | No | A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipul... | 2026-10-15 |
| CVE-2026-67223 | high | 7.1 | No | RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains... | 2026-10-15 |
| CVE-2026-96611 | high | 7.8 | No | FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF i... | 2026-10-15 |