Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100632 | medium | 6.5 | No | Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in versions < 8.6.89, LiveQuery evaluates the... | 2026-09-30 |
| CVE-2026-100631 | high | 7.5 | No | Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device to... | 2026-09-30 |
| CVE-2026-78902 | medium | 6.1 | No | Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG packa... | 2026-09-30 |
| CVE-2026-51773 | high | 8.1 | No | An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image locat... | 2026-09-30 |
| CVE-2026-51772 | medium | 6.5 | No | A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multiple_locations config... | 2026-09-30 |
| CVE-2026-97731 | high | 7.1 | No | MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Amz-SignedHeaders... | 2026-09-30 |
| CVE-2026-97730 | high | 8.5 | No | In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) wi... | 2026-09-30 |
| CVE-2026-57179 | medium | 4.2 | No | Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted... | 2026-09-30 |
| CVE-2026-55632 | medium | 4.3 | No | GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pip... | 2026-09-30 |
| CVE-2026-54355 | not reported | — | No | MapServer is a system for developing web-based GIS applications. From 6.0 until 8.6.4, MapServer's OpenLayers HTML output for SERVICE=WMS&RE... | 2026-09-30 |
| CVE-2026-92873 | high | 7.3 | No | Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arb... | 2026-09-30 |
| CVE-2026-92872 | medium | 4.3 | No | Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information. | 2026-09-30 |
| CVE-2026-92867 | high | 8.8 | No | An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination o... | 2026-09-30 |
| CVE-2026-94952 | critical | 9.8 | No | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It... | 2026-09-30 |
| CVE-2026-81310 | medium | 6.6 | No | Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is in... | 2026-09-30 |
| CVE-2026-82538 | high | 8.8 | No | ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where the table navigation... | 2026-09-30 |
| CVE-2026-77185 | critical | 9.1 | No | Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way t... | 2026-09-30 |
| CVE-2026-13087 | not reported | — | No | Rejected reason: This CVE was reserved in error and duplicates CVE-2026-89530. | 2026-09-30 |
| CVE-2026-103239 | not reported | — | No | MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted t... | 2026-09-30 |
| CVE-2026-103222 | medium | 5.6 | No | A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2. This impacts the function blosclz_decompress of the file blosc/blosclz.c of th... | 2026-09-30 |