Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102793 | critical | 9.1 | No | A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /api/ZRFirmware/set_t... | 2026-10-01 |
| CVE-2026-102249 | high | 7.3 | No | A security flaw has been discovered in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save.... | 2026-10-01 |
| CVE-2026-102373 | medium | 6.5 | No | GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authentic... | 2026-10-01 |
| CVE-2026-102365 | medium | 6.5 | No | mall4j through 4.0 fails to enforce authorization checks on GET endpoints in UserAddrController that retrieve customer address data. Authent... | 2026-10-01 |
| CVE-2026-102361 | critical | 9.1 | No | mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers... | 2026-10-01 |
| CVE-2026-102332 | medium | 6.1 | No | Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. A... | 2026-10-01 |
| CVE-2026-101882 | high | 8.8 | No | OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that accepts wildcard-exec... | 2026-10-01 |
| CVE-2026-102245 | high | 7.3 | No | A weakness has been identified in MODSetter SurfSense up to 2.0.3. The affected element is an unknown function of the file surfsense_backend... | 2026-10-01 |
| CVE-2026-102241 | low | 2.7 | No | A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backu... | 2026-10-01 |
| CVE-2026-101283 | not reported | — | No | iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the atta... | 2026-10-01 |
| CVE-2026-101276 | not reported | — | No | iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees s... | 2026-10-01 |
| CVE-2026-101859 | medium | 5.4 | No | A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escapeshellcmd of the fil... | 2026-10-01 |
| CVE-2026-101281 | high | 7.3 | No | A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_sp2_find_mai... | 2026-10-01 |
| CVE-2026-101278 | medium | 4.3 | No | A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_get_tld of the file libo... | 2026-10-01 |
| CVE-2026-101264 | critical | 9.1 | No | A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork/set_passwd. This ma... | 2026-10-01 |
| CVE-2026-101261 | critical | 9.1 | No | A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetup_wifi. Executing a ma... | 2026-10-01 |
| CVE-2026-101204 | medium | 6.3 | No | A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TG... | 2026-10-01 |
| CVE-2026-101188 | high | 8.3 | No | A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwd_set of the f... | 2026-10-01 |
| CVE-2026-101092 | medium | 5.3 | No | SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages endpoint, allowing publish readers to retrieve i... | 2026-10-01 |
| CVE-2025-10808 | critical | 9.8 | No | A weakness has been identified in Campcodes Farm Management System 1.0. Impacted is an unknown function of the file /uploadProduct.php. This... | 2026-10-01 |