Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105573 | medium | 4.3 | No | A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updat... | 2026-10-06 |
| CVE-2026-105486 | high | 7.3 | No | A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the com... | 2026-10-06 |
| CVE-2026-105470 | high | 7.3 | No | A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue a... | 2026-10-06 |
| CVE-2026-105438 | medium | 4.3 | No | A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /x_general_assemble_control/ja... | 2026-10-06 |
| CVE-2026-105392 | high | 7.3 | No | A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/app... | 2026-10-06 |
| CVE-2026-105387 | high | 7.3 | No | A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This af... | 2026-10-06 |
| CVE-2026-105383 | high | 7.3 | No | A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an u... | 2026-10-06 |
| CVE-2026-104966 | not reported | — | No | Plane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource identifiers belon... | 2026-10-06 |
| CVE-2026-104961 | medium | 5.4 | No | Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceOwnerPermission does not require is_active=True when checking whet... | 2026-10-06 |
| CVE-2026-104893 | medium | 5.4 | No | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-tok... | 2026-10-06 |
| CVE-2026-105314 | high | 7.5 | No | Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file... | 2026-10-06 |
| CVE-2026-105050 | not reported | — | No | PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation... | 2026-10-06 |
| CVE-2026-104019 | critical | 9.0 | No | OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4... | 2026-10-06 |
| CVE-2026-103958 | high | 7.6 | No | Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticate... | 2026-10-06 |
| CVE-2026-101112 | medium | 5.3 | No | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 - The public removeTmpAttachment action acc... | 2026-10-06 |
| CVE-2026-9812 | medium | 6.5 | No | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate that a property field belongs... | 2026-10-06 |
| CVE-2026-86134 | high | 7.5 | No | A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to c... | 2026-10-06 |
| CVE-2026-87830 | critical | 9.1 | No | In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never... | 2026-10-06 |
| CVE-2026-89238 | critical | 9.1 | No | WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted header, leading to incorrect c... | 2026-10-06 |
| CVE-2026-92121 | high | 7.5 | No | In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an internal "inside signed content" fla... | 2026-10-06 |