Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106107 | not reported | — | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG r... | 2026-10-06 |
| CVE-2026-106103 | high | 7.1 | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie genera... | 2026-10-06 |
| CVE-2026-105485 | medium | 6.8 | No | Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a u... | 2026-10-06 |
| CVE-2026-106040 | high | 8.2 | No | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any... | 2026-10-06 |
| CVE-2026-105842 | medium | 6.4 | No | lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader() of the lrz receive utility when copying overlong sen... | 2026-10-06 |
| CVE-2026-105837 | high | 7.8 | No | libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer... | 2026-10-06 |
| CVE-2026-95153 | medium | 4.9 | No | An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-dr... | 2026-10-06 |
| CVE-2026-56936 | medium | 6.8 | No | In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physi... | 2026-10-06 |
| CVE-2026-55307 | medium | 4.4 | No | In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to l... | 2026-10-06 |
| CVE-2026-0198 | medium | 4.4 | No | In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information... | 2026-10-06 |
| CVE-2026-106106 | not reported | — | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4 and @quasar/ap... | 2026-10-06 |
| CVE-2026-106105 | not reported | — | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.... | 2026-10-06 |
| CVE-2026-106102 | critical | 10.0 | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead() serializer in... | 2026-10-06 |
| CVE-2026-106101 | low | 3.1 | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.2, the openURL() utility in ui/src/utils... | 2026-10-06 |
| CVE-2026-104850 | high | 7.5 | No | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to ve... | 2026-10-06 |
| CVE-2026-26287 | high | 7.1 | No | External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting... | 2026-10-06 |
| CVE-2026-105845 | critical | 9.8 | No | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-... | 2026-10-06 |
| CVE-2026-105806 | not reported | — | No | Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authen... | 2026-10-06 |
| CVE-2026-105805 | not reported | — | No | Payload is a free and open source headless content management system. In versions before 3.88.0 and canary versions before 4.0.0-canary.27,... | 2026-10-06 |
| CVE-2026-105804 | not reported | — | No | Payload is a free and open source headless content management system. Payload versions from 3.0.0 before 3.90.0 and canary versions from 4.0... | 2026-10-06 |