Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85586 | not reported | — | No | phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenti... | 2026-09-10 |
| CVE-2026-85581 | high | 7.5 | No | SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains... | 2026-09-10 |
| CVE-2026-81805 | high | 8.1 | No | Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions. | 2026-09-10 |
| CVE-2026-81791 | medium | 6.5 | No | Subscriber Cross Site Scripting (XSS) in EventON <= 2.5.7 versions. | 2026-09-10 |
| CVE-2026-81785 | medium | 6.5 | No | Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions. | 2026-09-10 |
| CVE-2026-85528 | medium | 5.3 | No | Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a crede... | 2026-09-10 |
| CVE-2026-85525 | high | 7.4 | No | Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as... | 2026-09-10 |
| CVE-2026-78536 | medium | 6.5 | No | Unauthenticated Broken Access Control in Robokassa payment gateway for Woocommerce <= 1.8.9 versions. | 2026-09-10 |
| CVE-2026-75742 | medium | 5.4 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker... | 2026-09-10 |
| CVE-2026-75737 | medium | 5.4 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker... | 2026-09-10 |
| CVE-2026-77110 | high | 7.6 | No | Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could res... | 2026-09-10 |
| CVE-2026-80118 | high | 7.1 | No | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauth... | 2026-09-10 |
| CVE-2026-80113 | high | 7.1 | No | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privile... | 2026-09-10 |
| CVE-2026-75731 | medium | 5.4 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker... | 2026-09-10 |
| CVE-2026-75725 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75718 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75713 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75708 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75702 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75694 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |