Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90597 | medium | 6.3 | No | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of th... | 2026-09-14 |
| CVE-2026-90594 | medium | 6.3 | No | A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.check... | 2026-09-14 |
| CVE-2026-90584 | medium | 5.3 | No | A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonF... | 2026-09-14 |
| CVE-2026-90581 | medium | 6.3 | No | A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function MainController.autoUpdate of the file /adm... | 2026-09-14 |
| CVE-2026-90579 | high | 7.3 | No | A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function _authorize_http_key of the file cor... | 2026-09-14 |
| CVE-2026-90576 | low | 3.3 | No | A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gf_node_list_add_child of the file scenegraph/ba... | 2026-09-14 |
| CVE-2026-90574 | medium | 6.3 | No | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emp_... | 2026-09-14 |
| CVE-2026-90571 | medium | 4.3 | No | A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-... | 2026-09-14 |
| CVE-2026-90569 | low | 2.4 | No | A flaw has been found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0. This vulnerability affects the function AdminTopicController.validate... | 2026-09-14 |
| CVE-2026-90566 | high | 7.3 | No | A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vuln... | 2026-09-14 |
| CVE-2026-90564 | low | 3.5 | No | A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file b... | 2026-09-14 |
| CVE-2026-90528 | low | 3.5 | No | A flaw has been found in TDuckApp tduck-platform up to 5.3. Affected by this vulnerability is an unknown functionality of the file tduck-fro... | 2026-09-14 |
| CVE-2026-90526 | high | 7.3 | No | A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the... | 2026-09-14 |
| CVE-2026-90523 | high | 7.3 | No | A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected elem... | 2026-09-14 |
| CVE-2026-90521 | medium | 6.3 | No | A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. This issue affects som... | 2026-09-14 |
| CVE-2026-90518 | medium | 6.3 | No | A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.ph... | 2026-09-14 |
| CVE-2026-90516 | high | 7.3 | No | A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file... | 2026-09-14 |
| CVE-2026-90513 | medium | 6.5 | No | A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function... | 2026-09-14 |
| CVE-2026-90510 | high | 8.3 | No | A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of th... | 2026-09-14 |
| CVE-2026-90507 | medium | 6.3 | No | A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function get_surge... | 2026-09-14 |