Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90772 | high | 7.6 | No | Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in... | 2026-09-24 |
| CVE-2026-90769 | high | 7.7 | No | Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform serve... | 2026-09-24 |
| CVE-2026-82535 | medium | 6.1 | No | Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject ma... | 2026-09-24 |
| CVE-2026-89259 | critical | 9.8 | No | Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the de... | 2026-09-24 |
| CVE-2026-89145 | medium | 4.2 | No | Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error page rendered by getVal... | 2026-09-24 |
| CVE-2026-86177 | high | 8.8 | No | Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedu... | 2026-09-24 |
| CVE-2026-86123 | high | 8.7 | No | SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL qu... | 2026-09-24 |
| CVE-2026-86121 | critical | 9.8 | No | Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfa... | 2026-09-24 |
| CVE-2026-86116 | medium | 6.5 | No | Metabase versions before 0.63.1 fail to enforce data analyst permission checks on glossary API endpoints, allowing any authenticated user to... | 2026-09-24 |
| CVE-2026-86095 | high | 7.8 | No | Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5 attribute names int... | 2026-09-24 |
| CVE-2026-85699 | high | 7.5 | No | jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re... | 2026-09-24 |
| CVE-2026-85697 | medium | 6.5 | No | Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. A... | 2026-09-24 |
| CVE-2026-85693 | medium | 6.5 | No | Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private fi... | 2026-09-24 |
| CVE-2026-85688 | critical | 9.8 | No | TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints... | 2026-09-24 |
| CVE-2026-85675 | high | 7.5 | No | OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches calle... | 2026-09-24 |
| CVE-2026-85673 | high | 7.5 | No | LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media URL handler that allows una... | 2026-09-24 |
| CVE-2026-85668 | high | 7.5 | No | Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1/models/llm/aut... | 2026-09-24 |
| CVE-2026-85660 | high | 8.1 | No | cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function when ALLOW_SHELL_OPE... | 2026-09-24 |
| CVE-2026-85621 | medium | 6.5 | No | LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The webhook route... | 2026-09-24 |
| CVE-2026-6958 | high | 7.8 | No | Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine (wvsc.exe)... | 2026-09-24 |