Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84091 | medium | 5.3 | No | The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not verify with the payment provider that a payment notificatio... | 2026-09-24 |
| CVE-2026-16302 | medium | 4.3 | No | The Spectra Legacy – Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ... | 2026-09-24 |
| CVE-2026-15731 | medium | 6.4 | No | The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post conten... | 2026-09-24 |
| CVE-2026-77193 | high | 7.5 | No | The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via... | 2026-09-24 |
| CVE-2026-96892 | medium | 4.3 | No | A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing... | 2026-09-24 |
| CVE-2026-96884 | medium | 6.3 | No | A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.... | 2026-09-24 |
| CVE-2026-96881 | medium | 5.3 | No | A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/gi... | 2026-09-24 |
| CVE-2026-96880 | medium | 5.3 | No | A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/... | 2026-09-24 |
| CVE-2026-96803 | high | 7.3 | No | A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file Busine... | 2026-09-24 |
| CVE-2026-96774 | medium | 5.3 | No | A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107. This affects the function loadCfg... | 2026-09-24 |
| CVE-2026-96773 | medium | 4.3 | No | A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the fil... | 2026-09-24 |
| CVE-2026-73369 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in... | 2026-09-24 |
| CVE-2026-75728 | critical | 9.1 | No | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the co... | 2026-09-24 |
| CVE-2026-97168 | not reported | — | No | Rejected reason: it is a suggestion | 2026-09-24 |
| CVE-2026-94217 | low | 3.5 | No | A flaw was found in the User-Managed Access (UMA) implementation of Keycloak. The issue occurs in the authorization token endpoint when proc... | 2026-09-24 |
| CVE-2026-94150 | low | 2.4 | No | A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/... | 2026-09-24 |
| CVE-2026-94144 | high | 7.3 | No | A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library orm_lib/src/Criteria.cc... | 2026-09-24 |
| CVE-2026-94137 | low | 3.3 | No | A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub_180004AC0 of the file shdrv_x6... | 2026-09-24 |
| CVE-2026-94102 | medium | 4.3 | No | A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file /index.php?m=member&v=Login of the component Log... | 2026-09-24 |
| CVE-2026-78806 | medium | 5.5 | No | An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive i... | 2026-09-24 |