Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-53988 | critical | 10.0 | No | Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attac... | 2026-10-02 |
| CVE-2026-51936 | not reported | — | No | Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function can be used to copy the contents of one atta... | 2026-10-02 |
| CVE-2026-51872 | critical | 9.8 | No | Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py. | 2026-10-02 |
| CVE-2026-51867 | critical | 9.8 | No | agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accep... | 2026-10-02 |
| CVE-2026-51861 | critical | 9.8 | No | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py. | 2026-10-02 |
| CVE-2026-51857 | critical | 9.8 | No | In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter w... | 2026-10-02 |
| CVE-2026-51570 | high | 8.1 | No | modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file. | 2026-10-02 |
| CVE-2026-103055 | high | 7.5 | No | AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_R... | 2026-10-02 |
| CVE-2026-103042 | high | 7.5 | No | LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_trans_mode nccl, allowi... | 2026-10-02 |
| CVE-2026-102937 | not reported | — | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prompt text unchang... | 2026-10-02 |
| CVE-2026-102913 | high | 7.3 | No | A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file... | 2026-10-02 |
| CVE-2026-102910 | high | 7.3 | No | A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of... | 2026-10-02 |
| CVE-2026-102906 | medium | 6.3 | No | A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function... | 2026-10-02 |
| CVE-2026-102876 | high | 8.1 | No | SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_auth() verifies credentials against Surreal... | 2026-10-02 |
| CVE-2026-102846 | medium | 4.7 | No | A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sist... | 2026-10-02 |
| CVE-2026-102843 | medium | 4.7 | No | A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the funct... | 2026-10-02 |
| CVE-2026-102831 | high | 8.1 | No | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From Jupyter... | 2026-10-02 |
| CVE-2026-102823 | high | 7.5 | No | Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards CHANNEL_... | 2026-10-02 |
| CVE-2026-102808 | medium | 6.5 | No | PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is... | 2026-10-02 |
| CVE-2026-102804 | medium | 6.5 | No | A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwave_in... | 2026-10-02 |