Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-47132 | medium | 5.4 | No | phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injection vulnerability in... | 2026-09-24 |
| CVE-2026-69535 | high | 7.8 | No | Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69534 | high | 7.8 | No | Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allow... | 2026-09-24 |
| CVE-2026-69531 | medium | 5.5 | No | Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally. | 2026-09-24 |
| CVE-2026-69300 | high | 7.0 | No | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69383 | high | 7.0 | No | External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-94604 | not reported | — | No | Rejected reason: This CVE is a duplicate of another CVE. | 2026-09-24 |
| CVE-2026-58820 | high | 7.8 | No | In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege wit... | 2026-09-24 |
| CVE-2026-58822 | critical | 9.8 | No | In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code executi... | 2026-09-24 |
| CVE-2026-58823 | high | 7.8 | No | In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to loca... | 2026-09-24 |
| CVE-2026-58839 | high | 7.8 | No | In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of... | 2026-09-24 |
| CVE-2026-58846 | high | 7.8 | No | In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of... | 2026-09-24 |
| CVE-2026-58848 | high | 7.0 | No | In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escal... | 2026-09-24 |
| CVE-2026-93759 | high | 8.6 | No | Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes it to the database as a server-... | 2026-09-24 |
| CVE-2026-97179 | medium | 4.3 | No | A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability affects the function list of the file o2server/x_b... | 2026-09-24 |
| CVE-2026-96898 | high | 7.3 | No | A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/... | 2026-09-24 |
| CVE-2026-96891 | critical | 9.8 | No | A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component r... | 2026-09-24 |
| CVE-2026-96810 | low | 3.5 | No | A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save... | 2026-09-24 |
| CVE-2026-96772 | medium | 5.3 | No | A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=as... | 2026-09-24 |
| CVE-2026-96601 | high | 7.3 | No | A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin... | 2026-09-24 |