Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103648 | critical | 9.1 | No | Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written... | 2026-10-03 |
| CVE-2026-104403 | medium | 5.3 | No | Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Configured Access Contr... | 2026-10-03 |
| CVE-2026-102772 | high | 7.2 | No | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g. kl_code, kl_post_code)' parameter in all versions... | 2026-10-03 |
| CVE-2026-102002 | low | 3.1 | No | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Sensitive Information Exp... | 2026-10-03 |
| CVE-2026-102565 | high | 7.2 | No | The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_service_qty' parameter in all vers... | 2026-10-03 |
| CVE-2026-101104 | high | 7.7 | No | The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the config... | 2026-10-03 |
| CVE-2026-100184 | medium | 4.7 | No | The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Refl... | 2026-10-03 |
| CVE-2026-100107 | high | 7.2 | No | The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up t... | 2026-10-03 |
| CVE-2026-97517 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation e... | 2026-10-03 |
| CVE-2026-97516 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_res... | 2026-10-03 |
| CVE-2026-97510 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_... | 2026-10-03 |
| CVE-2026-97509 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service T... | 2026-10-03 |
| CVE-2026-97508 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Simila... | 2026-10-03 |
| CVE-2026-97507 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dma_alloc_coherent The retu... | 2026-10-03 |
| CVE-2026-97506 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: crypto: ixp4xx - fix buffer chain unwind on allocation failure chainup... | 2026-10-03 |
| CVE-2026-97502 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: avoid NULL deref of host->data in IRQ handler mmc_davinc... | 2026-10-03 |
| CVE-2026-97497 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id alloc... | 2026-10-03 |
| CVE-2026-97496 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in get_wave_state() The get_wave_s... | 2026-10-03 |
| CVE-2026-97495 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on allocate_doorbell allocated_doorbell has a... | 2026-10-03 |
| CVE-2026-97491 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma sel... | 2026-10-03 |