Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81181 | low | 3.7 | No | SysReptor is a fully customizable pentest reporting platform. Prior to 2026.68, the password authentication flow for protected shared notes... | 2026-09-21 |
| CVE-2026-84450 | medium | 4.3 | No | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a clap property and an... | 2026-09-21 |
| CVE-2026-84446 | high | 7.5 | No | libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track:... | 2026-09-21 |
| CVE-2026-63459 | high | 8.7 | No | Vendure is an open-source headless commerce platform. Prior to 3.6.5, RichTextDescriptionCell in packages/dashboard/src/lib/components/share... | 2026-09-21 |
| CVE-2026-54586 | not reported | — | No | mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mport_fetch_index(), mport_fetch_bootstrap_index(), and mport_fetch_bundle() p... | 2026-09-21 |
| CVE-2026-54575 | not reported | — | No | mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used race-prone path handli... | 2026-09-21 |
| CVE-2024-40766 | critical | 9.8 | Listed | An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized... | 2026-09-21 |
| CVE-2026-94210 | low | 3.5 | No | A flaw has been found in Hyve5 Leantime up to 3.9.8. Affected by this vulnerability is the function getAllGrouped of the file app/Domain/Tic... | 2026-09-21 |
| CVE-2026-94148 | medium | 5.3 | No | A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of the file /ScadaBR/export_project... | 2026-09-21 |
| CVE-2026-94142 | high | 8.8 | No | A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the funct... | 2026-09-21 |
| CVE-2026-94128 | high | 8.8 | No | A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub_1105C of the file BS_LED64.s... | 2026-09-21 |
| CVE-2026-94100 | critical | 9.9 | No | A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/rout... | 2026-09-21 |
| CVE-2026-94095 | critical | 9.9 | No | A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file... | 2026-09-21 |
| CVE-2026-94090 | medium | 6.3 | No | A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/... | 2026-09-21 |
| CVE-2026-94048 | medium | 6.6 | No | A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controlle... | 2026-09-21 |
| CVE-2026-94043 | medium | 5.3 | No | A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_deps/free5gc/NFs/amf/... | 2026-09-21 |
| CVE-2026-90860 | high | 7.1 | No | The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebVie... | 2026-09-21 |
| CVE-2026-94038 | high | 7.3 | No | A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx... | 2026-09-21 |
| CVE-2026-87205 | high | 7.5 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87200 | high | 8.2 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |