Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82011 | critical | 9.1 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | 2026-09-24 |
| CVE-2026-12370 | high | 7.6 | No | ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server... | 2026-09-24 |
| CVE-2026-92238 | critical | 9.8 | No | A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnera... | 2026-09-24 |
| CVE-2026-92239 | high | 8.1 | No | A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 1... | 2026-09-24 |
| CVE-2026-92240 | critical | 9.1 | No | A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response,... | 2026-09-24 |
| CVE-2026-91749 | critical | 9.6 | No | Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside th... | 2026-09-24 |
| CVE-2026-69279 | high | 7.0 | No | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69281 | high | 7.0 | No | Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-94097 | critical | 10.0 | No | A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of... | 2026-09-24 |
| CVE-2026-94092 | medium | 5.5 | No | A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing... | 2026-09-24 |
| CVE-2026-94050 | medium | 4.3 | No | A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand... | 2026-09-24 |
| CVE-2026-94045 | low | 3.5 | No | A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/Upl... | 2026-09-24 |
| CVE-2026-94040 | medium | 5.3 | No | A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderAction of the file app/(... | 2026-09-24 |
| CVE-2026-94035 | medium | 4.3 | No | A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommend... | 2026-09-24 |
| CVE-2026-94030 | low | 3.1 | No | A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is t... | 2026-09-24 |
| CVE-2026-88410 | high | 7.1 | No | The graph.UDF in FalkorDB (Redis module) v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the... | 2026-09-24 |
| CVE-2026-88405 | critical | 9.8 | No | A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of U... | 2026-09-24 |
| CVE-2026-79320 | medium | 6.1 | No | Stencil core 4.43.5 contains a DOM-based cross-site scripting (XSS) vulnerability in the component runtime. When a downstream application en... | 2026-09-24 |
| CVE-2026-67827 | critical | 9.8 | No | Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution (RCE)... | 2026-09-24 |
| CVE-2026-36469 | critical | 9.1 | No | CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php -- upload_from_inet (Media Manager's "Upload... | 2026-09-24 |