Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-4894 | not reported | — | No | A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multi... | 2026-10-08 |
| CVE-2026-12260 | not reported | — | No | SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/au... | 2026-10-08 |
| CVE-2026-107459 | critical | 9.8 | No | The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS... | 2026-10-08 |
| CVE-2026-107361 | medium | 4.2 | No | The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port 8005 on all network interfaces (viewHos... | 2026-10-08 |
| CVE-2026-107337 | high | 7.1 | No | The Malcolm kiosk Flask application exposes a POST /script_call/ | 2026-10-08 |
| CVE-2026-107336 | medium | 6.5 | No | Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sens... | 2026-10-08 |
| CVE-2026-107334 | medium | 5.4 | No | Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /hta... | 2026-10-08 |
| CVE-2026-107333 | high | 8.1 | No | Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua based role-based access control (RBAC) a... | 2026-10-08 |
| CVE-2026-107589 | high | 7.5 | No | Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generate arbitrary account... | 2026-10-08 |
| CVE-2026-107586 | medium | 4.3 | No | Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5 allows a remote aut... | 2026-10-08 |
| CVE-2026-107585 | medium | 5.3 | No | Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthe... | 2026-10-08 |
| CVE-2026-107587 | medium | 5.9 | No | Improper certificate validation in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker... | 2026-10-08 |
| CVE-2026-107584 | high | 7.4 | No | Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE (RFC 7672) to outbound SMTP delivery. The server's validatin... | 2026-10-08 |
| CVE-2026-107583 | medium | 6.5 | No | Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows... | 2026-10-08 |
| CVE-2026-107582 | medium | 6.5 | No | Inefficient algorithmic complexity in the REST API (6.3.3 through 6.3.5) and the IMAP PREVIEW response (6.2.22 through 6.3.5) of Progressive... | 2026-10-08 |
| CVE-2026-107581 | medium | 6.5 | No | Progressive Robot hMailServer 6.0.0 through 6.3.5 processes several IMAP commands from a signed-in account in time quadratic in the command'... | 2026-10-08 |
| CVE-2026-107580 | medium | 6.5 | No | Inefficient algorithmic complexity in the decoding of message header fields in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows a re... | 2026-10-08 |
| CVE-2026-107579 | high | 7.5 | No | Inefficient algorithmic complexity in the bounce and complaint processing of Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote u... | 2026-10-08 |
| CVE-2026-107578 | medium | 6.7 | No | Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive... | 2026-10-08 |
| CVE-2026-107577 | high | 7.5 | No | Inefficient algorithmic complexity and a non-terminating loop in the MIME processing of received messages in Progressive Robot hMailServer 6... | 2026-10-08 |