Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102302 | high | 8.8 | No | Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-10-01 |
| CVE-2026-97395 | high | 8.1 | No | Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings... | 2026-10-01 |
| CVE-2026-92172 | high | 8.8 | No | Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.hori... | 2026-10-01 |
| CVE-2026-88350 | medium | 6.2 | No | An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc(). | 2026-10-01 |
| CVE-2026-88467 | medium | 6.2 | No | CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of value, causing errors... | 2026-10-01 |
| CVE-2026-75886 | high | 7.2 | No | A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks... | 2026-10-01 |
| CVE-2026-51871 | critical | 9.8 | No | Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achiev... | 2026-10-01 |
| CVE-2026-51866 | critical | 9.8 | No | In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat... | 2026-10-01 |
| CVE-2026-51860 | high | 7.5 | No | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py. | 2026-10-01 |
| CVE-2026-51856 | critical | 9.8 | No | In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool, a remote WebSocket... | 2026-10-01 |
| CVE-2026-51568 | high | 8.1 | No | modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file. | 2026-10-01 |
| CVE-2026-103340 | medium | 5.3 | No | Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Securit... | 2026-10-01 |
| CVE-2026-103353 | medium | 5.3 | No | Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue... | 2026-10-01 |
| CVE-2026-103272 | high | 7.5 | No | Ghost versions from 2.10.0 before 6.63.0 contain a staff enumeration vulnerability in the content API that allows unauthenticated attackers... | 2026-10-01 |
| CVE-2026-103267 | medium | 4.3 | No | Ghost versions before 6.62.0 contain an authentication bypass vulnerability in staff invite acceptance that allows users to specify any emai... | 2026-10-01 |
| CVE-2026-81438 | high | 7.5 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. A... | 2026-10-01 |
| CVE-2026-81439 | medium | 6.5 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attack... | 2026-10-01 |
| CVE-2026-81474 | high | 7.8 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged atta... | 2026-10-01 |
| CVE-2026-81440 | critical | 9.8 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated... | 2026-10-01 |
| CVE-2026-81441 | medium | 5.5 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An... | 2026-10-01 |