Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85690 | high | 7.8 | No | Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files outside the project di... | 2026-09-23 |
| CVE-2026-85689 | medium | 6.5 | No | llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filter and lookup values... | 2026-09-23 |
| CVE-2026-85686 | high | 7.5 | No | ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media... | 2026-09-23 |
| CVE-2026-85685 | high | 7.5 | No | AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary server directories... | 2026-09-23 |
| CVE-2026-85684 | critical | 9.1 | No | marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename... | 2026-09-23 |
| CVE-2026-85672 | critical | 9.8 | No | zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from d... | 2026-09-23 |
| CVE-2026-85671 | high | 7.5 | No | QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/local_doc_qa/get_doc endpo... | 2026-09-23 |
| CVE-2026-84702 | high | 7.5 | No | facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside the jobs directo... | 2026-09-23 |
| CVE-2026-10144 | high | 7.8 | No | Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafte... | 2026-09-23 |
| CVE-2026-91986 | medium | 5.4 | No | gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/... | 2026-09-23 |
| CVE-2026-86185 | high | 8.0 | No | Bilibili Desktop through 1.18.0 disables TLS certificate verification process-wide and executes unsigned remote JavaScript configuration wit... | 2026-09-23 |
| CVE-2026-86178 | medium | 5.4 | No | Pixelfed through 0.12.9 fails to validate follower status in StoryComposeController react and comment endpoints, allowing authenticated user... | 2026-09-23 |
| CVE-2026-86173 | high | 7.5 | No | MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers... | 2026-09-23 |
| CVE-2026-86120 | medium | 4.3 | No | APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to enforce node-level acc... | 2026-09-23 |
| CVE-2026-9317 | high | 8.1 | No | Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticated attackers to execu... | 2026-09-23 |
| CVE-2026-85700 | medium | 6.5 | No | Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read ad... | 2026-09-23 |
| CVE-2026-85698 | medium | 5.5 | No | Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-c... | 2026-09-23 |
| CVE-2026-85666 | high | 7.5 | No | OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerability in the OpenAI-c... | 2026-09-23 |
| CVE-2026-85665 | medium | 6.5 | No | Bruno versions through 4.1.0 fail to validate file paths in request body declarations, allowing attackers to read arbitrary local files by u... | 2026-09-23 |
| CVE-2026-85661 | critical | 9.8 | No | excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attackers to read and write... | 2026-09-23 |