Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92980 | high | 7.2 | No | HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitr... | 2026-09-22 |
| CVE-2026-92984 | high | 8.1 | No | HUBzero CMS through 2.2.32 accepts session identifiers from query strings and request variables instead of cookies alone, allowing unauthent... | 2026-09-22 |
| CVE-2026-92983 | high | 7.5 | No | InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses... | 2026-09-22 |
| CVE-2026-92971 | high | 7.5 | No | InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthentic... | 2026-09-22 |
| CVE-2026-92970 | high | 8.8 | No | HUBzero CMS through 2.2.32 contains a path traversal vulnerability in project file upload handlers that allows authenticated project members... | 2026-09-22 |
| CVE-2026-92921 | medium | 4.9 | No | admin3 through 3.0.0 stores account passwords using single-round MD5 with only the username as salt and no key derivation function. Attacker... | 2026-09-22 |
| CVE-2026-92920 | medium | 5.4 | No | admin3 through 3.0.0 fails to invalidate existing sessions when disabling a user account, allowing attackers to retain authenticated access... | 2026-09-22 |
| CVE-2026-92919 | high | 8.1 | No | admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside... | 2026-09-22 |
| CVE-2026-92918 | high | 8.8 | No | admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log... | 2026-09-22 |
| CVE-2026-92816 | high | 7.8 | No | ComfyUI before 0.30.0 fails to sanitize folder_name input in dataset save nodes, allowing attackers to write files to arbitrary paths outsid... | 2026-09-22 |
| CVE-2026-92815 | high | 7.5 | No | changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps, allowing unauthenticated attackers to access inter... | 2026-09-22 |
| CVE-2026-92814 | medium | 4.2 | No | changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection. Attacke... | 2026-09-22 |
| CVE-2026-92811 | medium | 6.5 | No | browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restrictions in Playwright websocket endpoints, allowing authentica... | 2026-09-22 |
| CVE-2026-92803 | medium | 5.3 | No | LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access to translated fi... | 2026-09-22 |
| CVE-2026-92802 | medium | 4.3 | No | kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing guests to create boa... | 2026-09-22 |
| CVE-2026-92800 | medium | 6.8 | No | Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with re... | 2026-09-22 |
| CVE-2026-92796 | high | 8.8 | No | Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing rea... | 2026-09-22 |
| CVE-2026-92793 | high | 8.1 | No | GoAdmin through 1.2.26 fails to properly anchor the logout pattern when checking permissions, allowing authenticated users to bypass permiss... | 2026-09-22 |
| CVE-2026-92789 | medium | 6.5 | No | Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redi... | 2026-09-22 |
| CVE-2026-91996 | high | 7.5 | No | lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, allowing unauthenticated attackers to read the server... | 2026-09-22 |