Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-58491 | critical | 9.3 | No | Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoi... | 2026-09-24 |
| CVE-2026-61612 | medium | 5.7 | No | CKAN MCP Server is a tool for querying CKAN open data portals. Prior to version 0.4.108, the SSRF guard `validateServerUrl` (added for CVE-2... | 2026-09-24 |
| CVE-2026-79920 | critical | 9.9 | No | Ajenti is a Linux & BSD modular server admin panel. Prior to version 2.2.16, any authenticated user can call /api/core/tasks/start to enqueu... | 2026-09-24 |
| CVE-2026-77560 | high | 8.1 | No | Tinyauth is an authentication and authorization server. Prior to 5.1.2, Tinyauth compares forwarded hostnames case-sensitively while reverse... | 2026-09-24 |
| CVE-2026-63116 | high | 8.8 | No | deepstream is a server that allows clients and backend services to sync data, send messages and make rpcs at scale. From 10.1.0 until 10.1.1... | 2026-09-24 |
| CVE-2026-62987 | medium | 5.8 | No | Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. From 1.6.6 until 1.7.2, the CVE-2025-48865 fix in proxy/htt... | 2026-09-24 |
| CVE-2026-62866 | medium | 6.2 | No | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.2, selector/lexer/... | 2026-09-24 |
| CVE-2026-59168 | medium | 6.2 | No | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.1, parsing/json/js... | 2026-09-24 |
| CVE-2026-85751 | critical | 9.8 | No | Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployme... | 2026-09-24 |
| CVE-2026-61687 | high | 7.1 | No | Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to 0.91.1, ValidateOAuthState cle... | 2026-09-24 |
| CVE-2026-61630 | medium | 4.2 | No | nginx ignition is a user interface for the nginx web server. In versions 2.33.0 through 2.35.0, any user that has enabled the OTP 2FA can ha... | 2026-09-24 |
| CVE-2026-55074 | not reported | — | No | Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through version 1.3.0, the jailexec conn... | 2026-09-24 |
| CVE-2026-85271 | medium | 6.1 | No | Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the add_additi... | 2026-09-24 |
| CVE-2026-68928 | high | 8.6 | No | Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is decla... | 2026-09-24 |
| CVE-2026-61670 | medium | 6.5 | No | microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkCon... | 2026-09-24 |
| CVE-2026-77528 | medium | 5.3 | No | Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints th... | 2026-09-24 |
| CVE-2026-76901 | medium | 5.8 | No | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.4, GET /pool/l... | 2026-09-24 |
| CVE-2026-76900 | medium | 6.8 | No | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. In version 1.7.3, ApprovalR... | 2026-09-24 |
| CVE-2026-61723 | medium | 6.8 | No | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl c... | 2026-09-24 |
| CVE-2026-61720 | medium | 6.2 | No | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modul... | 2026-09-24 |