Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85626 | high | 7.5 | No | git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools... | 2026-09-23 |
| CVE-2026-85606 | high | 7.5 | No | firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained fileP... | 2026-09-23 |
| CVE-2026-85605 | medium | 5.3 | No | Slink before 1.12.3 fails to properly authorize access to image comment endpoints, allowing unauthenticated attackers to read comment thread... | 2026-09-23 |
| CVE-2026-82527 | high | 7.5 | No | R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks sear... | 2026-09-23 |
| CVE-2026-85395 | high | 7.1 | No | UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass... | 2026-09-23 |
| CVE-2026-85181 | critical | 9.8 | No | CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid... | 2026-09-23 |
| CVE-2026-85177 | medium | 5.4 | No | CRMEB through 6.0.0 fails to validate message ownership in the edit_message handler of MessageSystemController.php, allowing authenticated u... | 2026-09-23 |
| CVE-2026-92973 | medium | 6.1 | No | ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or... | 2026-09-23 |
| CVE-2026-91998 | critical | 9.9 | No | Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's c... | 2026-09-23 |
| CVE-2026-91993 | medium | 4.3 | No | Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenti... | 2026-09-23 |
| CVE-2026-91924 | high | 8.5 | No | pgweb through 0.17.0 leaves the POST /api/connect endpoint unguarded when connect-backend authorization is configured, allowing attackers to... | 2026-09-23 |
| CVE-2026-91201 | medium | 5.4 | No | DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating s... | 2026-09-23 |
| CVE-2026-91199 | medium | 5.0 | No | Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied U... | 2026-09-23 |
| CVE-2026-91080 | high | 7.5 | No | webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhau... | 2026-09-23 |
| CVE-2026-90946 | high | 7.5 | No | DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that a... | 2026-09-23 |
| CVE-2026-90945 | critical | 9.8 | No | Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment... | 2026-09-23 |
| CVE-2026-90942 | critical | 9.6 | No | Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoint... | 2026-09-23 |
| CVE-2026-55073 | medium | 6.2 | No | WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive url_fetcher an... | 2026-09-23 |
| CVE-2026-90940 | medium | 5.3 | No | novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows ano... | 2026-09-23 |
| CVE-2026-90938 | high | 8.6 | No | LangBot's plugin runtime (pip package langbot_plugin) through 0.4.17 starts a debug WebSocket server on 0.0.0.0:5401 (/plugin/ws) whose auth... | 2026-09-23 |