Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90710 | high | 7.3 | No | A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules... | 2026-09-16 |
| CVE-2026-90705 | medium | 6.6 | No | A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the compone... | 2026-09-16 |
| CVE-2026-90700 | medium | 6.3 | No | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /page... | 2026-09-16 |
| CVE-2026-90695 | low | 3.5 | No | A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of t... | 2026-09-16 |
| CVE-2026-90690 | high | 7.3 | No | A weakness has been identified in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The affected element is the function su... | 2026-09-16 |
| CVE-2026-90685 | low | 2.8 | No | A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsr_exec_command_list of the file laser/lsr_de... | 2026-09-16 |
| CVE-2026-90680 | critical | 9.9 | No | A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/Set... | 2026-09-16 |
| CVE-2026-90619 | high | 7.3 | No | A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the... | 2026-09-16 |
| CVE-2026-90613 | low | 3.3 | No | A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl_GetSampleInfos of the file i... | 2026-09-16 |
| CVE-2026-90608 | critical | 9.9 | No | A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw... | 2026-09-16 |
| CVE-2026-90603 | high | 7.3 | No | A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of... | 2026-09-16 |
| CVE-2026-90598 | medium | 6.3 | No | A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted eleme... | 2026-09-16 |
| CVE-2026-90593 | high | 7.3 | No | A vulnerability was determined in embedded-graphics up to 0.8.2. This affects the function ImageRaw::draw_sub_image of the file src/image/im... | 2026-09-16 |
| CVE-2026-90580 | medium | 6.3 | No | A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/s... | 2026-09-16 |
| CVE-2026-90575 | low | 3.7 | No | A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the componen... | 2026-09-16 |
| CVE-2026-90570 | low | 2.4 | No | A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.valid... | 2026-09-16 |
| CVE-2026-90565 | medium | 5.3 | No | A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an u... | 2026-09-16 |
| CVE-2026-90527 | medium | 4.3 | No | A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/... | 2026-09-16 |
| CVE-2026-90522 | high | 7.3 | No | A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the f... | 2026-09-16 |
| CVE-2026-90517 | medium | 5.3 | No | A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assi... | 2026-09-16 |