Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-63325 | high | 7.8 | No | Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @red... | 2026-09-24 |
| CVE-2026-63671 | high | 8.1 | No | MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to 0.22.1, @nuxtjs/mdc uses parseM... | 2026-09-24 |
| CVE-2026-61709 | medium | 5.3 | No | OpenFGA is an authorization and permission engine built for developers. Prior to 1.18.1, the ListUsers API could return a user that should h... | 2026-09-24 |
| CVE-2026-86003 | high | 7.5 | No | CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in p... | 2026-09-24 |
| CVE-2026-77620 | not reported | — | No | Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decompressed frame back i... | 2026-09-24 |
| CVE-2026-77619 | not reported | — | No | Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame leng... | 2026-09-24 |
| CVE-2026-54239 | high | 8.8 | No | Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envel... | 2026-09-24 |
| CVE-2026-83803 | not reported | — | No | Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled... | 2026-09-24 |
| CVE-2026-61821 | high | 8.5 | No | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id() and drop_partition_t... | 2026-09-24 |
| CVE-2026-61818 | high | 8.5 | No | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_... | 2026-09-24 |
| CVE-2026-61817 | high | 8.5 | No | pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance(), show_partitions(), sh... | 2026-09-24 |
| CVE-2026-77616 | medium | 6.1 | No | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7... | 2026-09-24 |
| CVE-2026-77610 | medium | 6.1 | No | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers... | 2026-09-24 |
| CVE-2026-77609 | medium | 6.1 | No | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers... | 2026-09-24 |
| CVE-2026-77608 | medium | 6.1 | No | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers... | 2026-09-24 |
| CVE-2026-77606 | medium | 6.1 | No | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers... | 2026-09-24 |
| CVE-2026-61548 | high | 8.1 | No | Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSD_PARAM function in... | 2026-09-24 |
| CVE-2026-55556 | not reported | — | No | Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_auth_header function in... | 2026-09-24 |
| CVE-2026-81515 | high | 7.5 | No | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 unti... | 2026-09-24 |
| CVE-2026-85077 | high | 8.2 | No | Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sani... | 2026-09-24 |