Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92161 | critical | 9.8 | No | FriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other providers. Prior to 1.7.4 and 2.0.0-beta.4,... | 2026-09-30 |
| CVE-2026-62286 | medium | 4.3 | No | Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's l... | 2026-09-30 |
| CVE-2026-61823 | high | 7.3 | No | code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a st... | 2026-09-30 |
| CVE-2026-57440 | high | 7.5 | No | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips... | 2026-09-30 |
| CVE-2026-93405 | medium | 6.1 | No | Mailspring is a fast, cross-platform, open-source email client. Prior to 1.17.0, attachment quick preview converts Markdown, DOCX, and XLSX... | 2026-09-30 |
| CVE-2026-61788 | high | 7.4 | No | DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting `readonly = true`... | 2026-09-30 |
| CVE-2026-61782 | high | 7.5 | No | Rsdoctor is a build analyzer tailored for projects built with Rspack. Prior to version 1.5.16, the default Rsdoctor report HTTP server start... | 2026-09-30 |
| CVE-2026-61741 | critical | 9.3 | No | http4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39... | 2026-09-30 |
| CVE-2026-54461 | medium | 6.5 | No | Habitica is a habit tracker application that treats goals like a role-playing game. From 4.172.1 until 5.48.2, a query parameter on Habitica... | 2026-09-30 |
| CVE-2026-56744 | not reported | — | No | `@bsv/wallet-toolbox` provides BRC-100 wallet signing and storage components, while `@bsv/wallet-toolbox-client` and `@bsv/wallet-toolbox-mo... | 2026-09-30 |
| CVE-2026-63630 | low | 3.4 | No | BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow() accepts the Timestamp node's tsaUrl... | 2026-09-30 |
| CVE-2026-76086 | high | 8.5 | No | Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integrations/form-settings control panel action... | 2026-09-30 |
| CVE-2026-52744 | not reported | — | No | GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/p... | 2026-09-30 |
| CVE-2026-57583 | low | 3.3 | No | OpenZeppelin Contracts Wizard is a web application to interactively build a contract out of components from OpenZeppelin Contracts. Prior to... | 2026-09-30 |
| CVE-2026-57578 | not reported | — | No | DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, AuthorizeActionFilter perf... | 2026-09-30 |
| CVE-2026-57577 | not reported | — | No | DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, a route containing multipl... | 2026-09-30 |
| CVE-2026-57570 | medium | 6.5 | No | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build c... | 2026-09-30 |
| CVE-2026-55832 | medium | 6.1 | No | Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17, 0.22.3, and 0.23.2, the tract-onnx cra... | 2026-09-30 |
| CVE-2026-54723 | medium | 6.5 | No | devpi is a Python package index staging server and packaging, testing, and release tool. Prior to 6.20.2 and 7.0.0b3, a server configured wi... | 2026-09-30 |
| CVE-2026-54182 | high | 8.1 | No | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build c... | 2026-09-30 |