Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90773 | low | 3.2 | No | procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attack... | 2026-09-23 |
| CVE-2026-90768 | high | 8.1 | No | CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analys... | 2026-09-23 |
| CVE-2026-90562 | high | 8.1 | No | LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated res... | 2026-09-23 |
| CVE-2026-90557 | medium | 6.1 | No | Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files wit... | 2026-09-23 |
| CVE-2026-90474 | medium | 6.8 | No | MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authenticat... | 2026-09-23 |
| CVE-2026-90473 | medium | 5.3 | No | msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with... | 2026-09-23 |
| CVE-2026-90472 | medium | 5.3 | No | msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays an... | 2026-09-23 |
| CVE-2026-89268 | medium | 5.4 | No | QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping them in the list hel... | 2026-09-23 |
| CVE-2026-89267 | medium | 4.3 | No | starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an empty list, allowing au... | 2026-09-23 |
| CVE-2026-89013 | high | 7.5 | No | Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files t... | 2026-09-23 |
| CVE-2026-89012 | medium | 6.5 | No | Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows auth... | 2026-09-23 |
| CVE-2026-89011 | high | 7.1 | No | isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a malicious Git server o... | 2026-09-23 |
| CVE-2026-86169 | high | 8.8 | No | Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code defaults to None in... | 2026-09-23 |
| CVE-2026-86122 | medium | 5.0 | No | Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations... | 2026-09-23 |
| CVE-2026-86115 | medium | 5.0 | No | Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation a... | 2026-09-23 |
| CVE-2026-86114 | medium | 6.5 | No | Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delet... | 2026-09-23 |
| CVE-2026-86098 | high | 7.4 | No | ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller... | 2026-09-23 |
| CVE-2026-86091 | high | 7.1 | No | ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to dele... | 2026-09-23 |
| CVE-2026-86090 | high | 7.1 | No | ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers. Authenticated non-ad... | 2026-09-23 |
| CVE-2026-85691 | high | 7.5 | No | MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supp... | 2026-09-23 |