Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81645 | medium | 5.9 | No | Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability. | 2026-09-24 |
| CVE-2026-63628 | not reported | — | No | mppx is a TypeScript interface for machine payments protocol. Prior to 0.8.2, the fee-payer cosigning path in src/tempo/internal/fee-payer.t... | 2026-09-24 |
| CVE-2026-59167 | critical | 10.0 | No | SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/li... | 2026-09-24 |
| CVE-2026-56736 | high | 8.2 | No | phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in versions prior to 4.2.0-alpha allows an... | 2026-09-24 |
| CVE-2026-3253 | medium | 4.3 | No | The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability... | 2026-09-24 |
| CVE-2026-69322 | high | 8.0 | No | Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. | 2026-09-24 |
| CVE-2026-69328 | high | 7.8 | No | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-44236 | high | 7.1 | No | rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune... | 2026-09-24 |
| CVE-2026-96826 | high | 7.6 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List allo... | 2026-09-24 |
| CVE-2026-92905 | medium | 5.3 | No | ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash... | 2026-09-24 |
| CVE-2026-71465 | low | 3.1 | No | RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob... | 2026-09-24 |
| CVE-2026-71464 | low | 3.1 | No | LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch seriali... | 2026-09-24 |
| CVE-2026-96445 | medium | 6.8 | No | A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occurs when the sys... | 2026-09-24 |
| CVE-2026-69377 | high | 7.8 | No | Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-7169 | not reported | — | No | a vulnerability involving an unchecked search path element in Evope Collector, versions prior to 1.1.7.13, allows a local attacker without p... | 2026-09-24 |
| CVE-2026-97181 | medium | 5.3 | No | GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system log... | 2026-09-24 |
| CVE-2026-96603 | high | 7.3 | No | A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user of the file functio... | 2026-09-24 |
| CVE-2026-96556 | high | 7.3 | No | A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.ph... | 2026-09-24 |
| CVE-2026-5696 | not reported | — | No | Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/settings’ endpoint in the... | 2026-09-24 |
| CVE-2026-5695 | not reported | — | No | Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to t... | 2026-09-24 |