Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-76834 | high | 8.1 | No | b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array object check in param_ch... | 2026-09-23 |
| CVE-2026-91937 | high | 7.5 | No | Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId parameter before using it in MongoDB queries within the MongoDBMemory no... | 2026-09-23 |
| CVE-2026-91931 | high | 8.5 | No | Flowise before 3.1.4 contains a remote code execution vulnerability in the Custom MCP node that allows authenticated attackers to execute ar... | 2026-09-23 |
| CVE-2026-91930 | high | 7.5 | No | Flowise before 3.1.4 fails to scope enterprise organization and workspace membership APIs to the caller's tenant, allowing authenticated use... | 2026-09-23 |
| CVE-2026-91929 | high | 7.1 | No | Flowise versions before 3.1.4 contain cross-tenant authorization gaps in Enterprise endpoints that fail to verify resource ownership before... | 2026-09-23 |
| CVE-2026-91774 | medium | 4.3 | No | Yao through v1.0.0-rc22 authenticates but fails to authorize the GET /user/teams/:id endpoint, allowing any logged-in user to read full team... | 2026-09-23 |
| CVE-2026-91772 | medium | 6.1 | No | Halo through 2.26.1 contains an open redirect vulnerability in the anonymous thumbnail endpoint that fails to validate the uri query paramet... | 2026-09-23 |
| CVE-2026-91770 | medium | 6.5 | No | IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-resource endpoints, allowing authenticated employees to read any... | 2026-09-23 |
| CVE-2026-91750 | medium | 6.5 | No | WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when download... | 2026-09-23 |
| CVE-2026-91200 | high | 8.8 | No | DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a mali... | 2026-09-23 |
| CVE-2026-91146 | medium | 6.1 | No | Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actor... | 2026-09-23 |
| CVE-2026-91143 | high | 7.2 | No | goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass c... | 2026-09-23 |
| CVE-2026-82028 | high | 8.8 | No | Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows aut... | 2026-09-23 |
| CVE-2026-91081 | medium | 5.8 | No | Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make o... | 2026-09-23 |
| CVE-2026-90941 | medium | 4.3 | No | novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated ba... | 2026-09-23 |
| CVE-2026-90939 | medium | 6.5 | No | novel-plus through 5.3.3 contains an information disclosure vulnerability in the /sys/user/list endpoint that lacks proper permission annota... | 2026-09-23 |
| CVE-2026-90937 | critical | 9.9 | No | froxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing authenticated customers to inject arb... | 2026-09-23 |
| CVE-2026-90934 | medium | 4.3 | No | EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authentic... | 2026-09-23 |
| CVE-2026-90778 | high | 7.5 | No | SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of... | 2026-09-23 |
| CVE-2026-90774 | high | 7.5 | No | rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypa... | 2026-09-23 |