Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105890 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Block... | 2026-10-08 |
| CVE-2026-105887 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robosoft Robo Gallery robo-gallery all... | 2026-10-08 |
| CVE-2026-105886 | medium | 6.5 | No | Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control... | 2026-10-08 |
| CVE-2026-105878 | medium | 5.3 | No | Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly... | 2026-10-08 |
| CVE-2026-105078 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Store Locator WP Store Locator wp-s... | 2026-10-08 |
| CVE-2026-105076 | high | 7.6 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Bli... | 2026-10-08 |
| CVE-2026-103070 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShortPixel ShortPixel Image Optimizer... | 2026-10-08 |
| CVE-2026-85097 | critical | 9.8 | No | The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This... | 2026-10-08 |
| CVE-2026-106290 | medium | 4.7 | No | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the render... | 2026-10-08 |
| CVE-2026-106296 | medium | 5.4 | No | Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerin... | 2026-10-08 |
| CVE-2026-39790 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows... | 2026-10-08 |
| CVE-2026-39723 | high | 7.5 | No | Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configure... | 2026-10-08 |
| CVE-2026-106196 | high | 7.6 | No | Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy... | 2026-10-08 |
| CVE-2026-106387 | high | 8.8 | No | Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to... | 2026-10-08 |
| CVE-2026-106395 | medium | 4.7 | No | Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sa... | 2026-10-08 |
| CVE-2026-106399 | low | 3.3 | No | Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially rea... | 2026-10-08 |
| CVE-2022-37897 | critical | 9.8 | No | There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets des... | 2026-10-08 |
| CVE-2026-106424 | medium | 4.0 | No | Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read... | 2026-10-08 |
| CVE-2026-67411 | high | 7.1 | No | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSock... | 2026-10-08 |
| CVE-2026-67412 | high | 7.1 | No | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ... | 2026-10-08 |