Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-93969 | high | 7.3 | No | A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1. This vulnerability affects the function ensure_default_superuser of the file r... | 2026-09-22 |
| CVE-2026-93964 | medium | 5.3 | No | A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate o... | 2026-09-22 |
| CVE-2026-93954 | medium | 4.3 | No | A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected is the function AppSettingController.getAp... | 2026-09-22 |
| CVE-2026-93922 | high | 8.8 | No | SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripti... | 2026-09-22 |
| CVE-2026-93741 | critical | 10.0 | No | A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the f... | 2026-09-22 |
| CVE-2026-93738 | critical | 9.9 | No | A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Pe... | 2026-09-22 |
| CVE-2026-93559 | high | 7.3 | No | A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown func... | 2026-09-22 |
| CVE-2026-93532 | medium | 6.3 | No | A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affe... | 2026-09-22 |
| CVE-2026-93371 | high | 8.3 | No | A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of... | 2026-09-22 |
| CVE-2026-93311 | medium | 4.3 | No | A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file po... | 2026-09-22 |
| CVE-2026-92993 | medium | 6.3 | No | A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/int... | 2026-09-22 |
| CVE-2026-92880 | medium | 6.3 | No | A weakness has been identified in vgmstream up to r2117. Impacted is the function vadpcm_read_coefs_be of the file src/coding/vadpcm_decoder... | 2026-09-22 |
| CVE-2026-92475 | medium | 5.3 | No | A weakness has been identified in GPAC 26.08-DEV. This impacts the function wait_for_header_and_parse of the file src/utils/downloader.c. Th... | 2026-09-22 |
| CVE-2026-92417 | medium | 6.5 | No | A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.... | 2026-09-22 |
| CVE-2026-92402 | medium | 6.3 | No | A security flaw has been discovered in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This issue affects the function index... | 2026-09-22 |
| CVE-2026-92365 | medium | 4.3 | No | A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample... | 2026-09-22 |
| CVE-2026-92221 | medium | 4.7 | No | A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerabil... | 2026-09-22 |
| CVE-2026-92214 | low | 3.5 | No | A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client/angular/projec... | 2026-09-22 |
| CVE-2026-91854 | medium | 4.3 | No | A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such... | 2026-09-22 |
| CVE-2026-83279 | medium | 5.5 | No | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is a... | 2026-09-22 |