Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-18562 | medium | 6.1 | No | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via SEO-friend... | 2026-09-11 |
| CVE-2026-86083 | high | 8.8 | No | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source tex... | 2026-09-11 |
| CVE-2026-57164 | medium | 5.9 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the... | 2026-09-11 |
| CVE-2026-57163 | critical | 9.1 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in th... | 2026-09-11 |
| CVE-2026-57162 | critical | 9.1 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in th... | 2026-09-11 |
| CVE-2026-57161 | high | 8.2 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJ... | 2026-09-11 |
| CVE-2026-57160 | medium | 5.3 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip... | 2026-09-11 |
| CVE-2026-57159 | high | 7.5 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and writ... | 2026-09-11 |
| CVE-2026-89258 | medium | 6.3 | No | Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during dire... | 2026-09-11 |
| CVE-2026-89255 | high | 8.7 | No | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the LoginControl plug... | 2026-09-11 |
| CVE-2026-89253 | high | 8.7 | No | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donati... | 2026-09-11 |
| CVE-2026-89250 | high | 7.5 | No | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFi... | 2026-09-11 |
| CVE-2026-89248 | medium | 5.3 | No | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json... | 2026-09-11 |
| CVE-2026-89245 | medium | 6.5 | No | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in playlistRemove.ph... | 2026-09-11 |
| CVE-2026-89243 | high | 8.1 | No | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setG... | 2026-09-11 |
| CVE-2026-89240 | medium | 6.1 | No | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Live/c... | 2026-09-11 |
| CVE-2026-89148 | medium | 5.4 | No | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint i... | 2026-09-11 |
| CVE-2026-84941 | not reported | — | No | An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with... | 2026-09-11 |
| CVE-2026-76653 | not reported | — | No | A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v... | 2026-09-11 |
| CVE-2026-76652 | not reported | — | No | An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6... | 2026-09-11 |