Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-89042 | critical | 9.1 | No | passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypas... | 2026-09-11 |
| CVE-2026-88959 | high | 8.8 | No | Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-priv... | 2026-09-11 |
| CVE-2026-88899 | critical | 9.8 | No | knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote... | 2026-09-11 |
| CVE-2026-87923 | medium | 4.3 | No | A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issu... | 2026-09-11 |
| CVE-2026-87870 | medium | 6.4 | No | The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Parameters (interval, for... | 2026-09-11 |
| CVE-2026-86808 | high | 7.3 | No | A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault_unlock_handler... | 2026-09-11 |
| CVE-2026-86804 | medium | 5.3 | No | A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file app... | 2026-09-11 |
| CVE-2026-86674 | medium | 6.3 | No | A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerabi... | 2026-09-11 |
| CVE-2026-86672 | medium | 5.3 | No | A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknow... | 2026-09-11 |
| CVE-2026-86668 | medium | 4.3 | No | A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the fil... | 2026-09-11 |
| CVE-2026-86519 | medium | 5.3 | No | A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of... | 2026-09-11 |
| CVE-2026-86509 | critical | 9.6 | No | A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the co... | 2026-09-11 |
| CVE-2026-86310 | medium | 6.3 | No | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /page... | 2026-09-11 |
| CVE-2026-86305 | high | 7.3 | No | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affe... | 2026-09-11 |
| CVE-2026-86299 | critical | 9.9 | No | A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingT... | 2026-09-11 |
| CVE-2026-86294 | medium | 4.3 | No | A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of... | 2026-09-11 |
| CVE-2026-86289 | medium | 4.3 | No | A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the compon... | 2026-09-11 |
| CVE-2026-86281 | medium | 4.3 | No | A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown... | 2026-09-11 |
| CVE-2026-86273 | high | 7.3 | No | A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file... | 2026-09-11 |
| CVE-2026-86236 | medium | 6.3 | No | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages... | 2026-09-11 |