Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-52741 | not reported | — | No | GoCD is a continuous deliver server. From 18.3.0 until 26.1.0, GoCD can generate unescaped tracking-tool links from commit comments when a p... | 2026-09-24 |
| CVE-2026-50349 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock... | 2026-09-24 |
| CVE-2026-81855 | critical | 9.1 | No | A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard. | 2026-09-24 |
| CVE-2026-78225 | critical | 9.0 | No | A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard. | 2026-09-24 |
| CVE-2026-84399 | high | 8.8 | No | The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does... | 2026-09-24 |
| CVE-2026-82566 | high | 8.8 | No | The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the... | 2026-09-24 |
| CVE-2026-88419 | high | 8.8 | No | An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of Wuzh... | 2026-09-24 |
| CVE-2026-75517 | medium | 6.5 | No | Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including rem... | 2026-09-24 |
| CVE-2026-75510 | not reported | — | No | Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu's @novu/js In-App Inbox and the @novu/react... | 2026-09-24 |
| CVE-2026-61851 | not reported | — | No | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.... | 2026-09-24 |
| CVE-2026-61743 | medium | 6.3 | No | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.... | 2026-09-24 |
| CVE-2026-61652 | not reported | — | No | Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service via memory exhaustion. The issue affects all caller... | 2026-09-24 |
| CVE-2026-61647 | not reported | — | No | NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault direc... | 2026-09-24 |
| CVE-2026-58270 | medium | 6.5 | No | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, the sync diff endpo... | 2026-09-24 |
| CVE-2026-62247 | medium | 6.5 | No | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to 2.111.2, Realtime authorization does not corre... | 2026-09-24 |
| CVE-2026-55897 | high | 8.8 | No | luci-app-advanced-reboot is a LuCI (web interface) application for OpenWrt that provides a way to reboot your router into an alternative fir... | 2026-09-24 |
| CVE-2026-91167 | not reported | — | No | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.28.4, PUT /@warpgate/admin/api/users/:id/roles/:role_id r... | 2026-09-24 |
| CVE-2026-91165 | low | 2.4 | No | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.27.6, the response_mode=form_post SSO return path in warp... | 2026-09-24 |
| CVE-2026-91164 | medium | 4.3 | No | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.23.0 until 0.27.3, HTTP API token authentication resolves Con... | 2026-09-24 |
| CVE-2026-63329 | medium | 4.9 | No | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.6, copy_server_request in warpgate-protocol-http/src/p... | 2026-09-24 |