Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-12210 | critical | 9.8 | No | A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability is the function SetValue/GetValue of the file /gof... | 2026-10-08 |
| CVE-2025-12208 | critical | 9.8 | No | A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /admin_cla... | 2026-10-08 |
| CVE-2025-59503 | critical | 9.8 | No | Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network. | 2026-10-08 |
| CVE-2025-59273 | critical | 9.8 | No | Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network. | 2026-10-08 |
| CVE-2025-41108 | critical | 9.8 | No | The communication protocol implemented in Ghost Robotics Vision 60 v0.27.2 could allow an attacker to send commands to the robot from an ext... | 2026-10-08 |
| CVE-2025-41018 | critical | 9.8 | No | SQL injection in Sergestec's Exito v8.0. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the... | 2026-10-08 |
| CVE-2025-55089 | critical | 9.8 | No | In FileX before 6.4.2, the file support module for Eclipse Foundation ThreadX, there was a possible buffer overflow in the FileX RAM disk dr... | 2026-10-08 |
| CVE-2025-61757 | critical | 9.8 | Listed | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affecte... | 2026-10-08 |
| CVE-2020-1054 | high | 7.0 | Listed | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An... | 2026-10-08 |
| CVE-2019-8720 | high | 8.8 | Listed | A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code e... | 2026-10-08 |
| CVE-2025-5777 | high | 7.5 | Listed | Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN,... | 2026-10-08 |
| CVE-2026-63030 | critical | 9.8 | Listed | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the... | 2026-10-08 |
| CVE-2026-60137 | medium | 5.9 | Listed | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query... | 2026-10-08 |
| CVE-2025-21042 | critical | 9.8 | Listed | Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. | 2026-10-08 |
| CVE-2024-50623 | critical | 9.8 | Listed | In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download th... | 2026-10-08 |
| CVE-2023-35311 | high | 8.8 | Listed | Microsoft Outlook Security Feature Bypass Vulnerability | 2026-10-08 |
| CVE-2021-41277 | high | 7.5 | Listed | Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`... | 2026-10-08 |
| CVE-2025-14515 | critical | 9.8 | No | A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected by this vulnerability is an unknown functionality of th... | 2026-10-08 |
| CVE-2025-14514 | critical | 9.8 | No | A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. T... | 2026-10-08 |
| CVE-2025-67511 | critical | 9.6 | No | Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9... | 2026-10-08 |