Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86231 | low | 3.7 | No | A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraf... | 2026-09-11 |
| CVE-2026-86224 | high | 7.3 | No | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqli_query of the file /a... | 2026-09-11 |
| CVE-2026-86217 | medium | 5.3 | No | A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hote... | 2026-09-11 |
| CVE-2026-86212 | medium | 4.3 | No | A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation le... | 2026-09-11 |
| CVE-2026-86183 | medium | 5.3 | No | A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmFrontPlugin/modules/d... | 2026-09-11 |
| CVE-2026-86172 | medium | 6.3 | No | A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Perfor... | 2026-09-11 |
| CVE-2026-86166 | high | 8.8 | No | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect... | 2026-09-11 |
| CVE-2026-86161 | high | 7.3 | No | A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?acti... | 2026-09-11 |
| CVE-2026-86151 | critical | 9.1 | No | A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the comp... | 2026-09-11 |
| CVE-2026-85645 | medium | 6.1 | No | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Script... | 2026-09-11 |
| CVE-2026-85703 | medium | 6.5 | No | A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function g... | 2026-09-11 |
| CVE-2026-85638 | high | 7.3 | No | A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument... | 2026-09-11 |
| CVE-2026-85516 | high | 7.3 | No | A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /buspro... | 2026-09-11 |
| CVE-2026-85402 | high | 7.3 | No | A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/bo... | 2026-09-11 |
| CVE-2026-85383 | medium | 6.3 | No | A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_del... | 2026-09-11 |
| CVE-2026-84816 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in WPCS <= 1.3.2 versions. | 2026-09-11 |
| CVE-2026-85378 | high | 7.3 | No | A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected... | 2026-09-11 |
| CVE-2026-83997 | high | 8.1 | No | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 2026-09-11 |
| CVE-2026-83990 | high | 7.8 | No | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 2026-09-11 |
| CVE-2026-82537 | high | 8.8 | No | Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a... | 2026-09-11 |