Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-61554 | high | 7.5 | No | emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport accepts attacker-contro... | 2026-09-30 |
| CVE-2026-54544 | high | 7.2 | No | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are... | 2026-09-30 |
| CVE-2026-54337 | critical | 9.8 | No | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows... | 2026-09-30 |
| CVE-2026-32599 | not reported | — | No | Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQ... | 2026-09-30 |
| CVE-2026-61668 | high | 8.1 | No | DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagem... | 2026-09-30 |
| CVE-2026-61667 | critical | 9.9 | No | DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementS... | 2026-09-30 |
| CVE-2026-58502 | not reported | — | No | githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is... | 2026-09-30 |
| CVE-2026-58485 | high | 7.1 | No | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.... | 2026-09-30 |
| CVE-2026-58483 | high | 7.5 | No | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.... | 2026-09-30 |
| CVE-2026-57442 | not reported | — | No | MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pa... | 2026-09-30 |
| CVE-2026-57441 | not reported | — | No | MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pa... | 2026-09-30 |
| CVE-2026-56831 | medium | 6.5 | No | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixed_amount d... | 2026-09-30 |
| CVE-2026-56830 | medium | 6.5 | No | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store() in packages/admin/sr... | 2026-09-30 |
| CVE-2026-56829 | high | 8.1 | No | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Products/VariantStock.php exposes stock... | 2026-09-30 |
| CVE-2026-56827 | high | 8.1 | No | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, groupedBulkActions in packages/admin/src/Livewire/Pages/Attribute/Browse.php,... | 2026-09-30 |
| CVE-2026-56825 | high | 8.1 | No | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Collection/CollectionProducts.php expos... | 2026-09-30 |
| CVE-2026-55375 | medium | 5.3 | No | canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request::getQueryParams() places app_... | 2026-09-30 |
| CVE-2026-55374 | medium | 4.8 | No | canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, Request::buildRequestUrl() joins values ret... | 2026-09-30 |
| CVE-2026-54689 | medium | 6.3 | No | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.... | 2026-09-30 |
| CVE-2026-54688 | medium | 6.5 | No | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.... | 2026-09-30 |