Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-21106 | not reported | — | No | Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable en... | 2026-09-10 |
| CVE-2026-80083 | high | 8.8 | No | Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. | 2026-09-10 |
| CVE-2026-80093 | high | 7.0 | No | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | 2026-09-10 |
| CVE-2026-9166 | high | 7.5 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management... | 2026-09-10 |
| CVE-2026-9163 | critical | 9.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Mana... | 2026-09-10 |
| CVE-2026-9161 | medium | 5.3 | No | Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Templa... | 2026-09-10 |
| CVE-2026-78085 | not reported | — | No | Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller ta... | 2026-09-10 |
| CVE-2026-78374 | not reported | — | No | Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0 - The front-end JSON editor... | 2026-09-10 |
| CVE-2026-78303 | not reported | — | No | Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 - Booking i... | 2026-09-10 |
| CVE-2026-78302 | not reported | — | No | Joomla Extension - joomshaper.com - Unauthenticated Stored Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Pr... | 2026-09-10 |
| CVE-2026-78084 | not reported | — | No | Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 - The gallery management contr... | 2026-09-10 |
| CVE-2026-78083 | not reported | — | No | Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 -... | 2026-09-10 |
| CVE-2026-78082 | not reported | — | No | Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 - The property... | 2026-09-10 |
| CVE-2026-88269 | medium | 6.5 | No | GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user cred... | 2026-09-10 |
| CVE-2026-88268 | medium | 6.5 | No | GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the... | 2026-09-10 |
| CVE-2026-7188 | critical | 9.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. C... | 2026-09-10 |
| CVE-2026-82925 | high | 8.1 | No | The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being deserialized, and derives the key protecting that da... | 2026-09-10 |
| CVE-2026-82582 | medium | 4.3 | No | An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retriev... | 2026-09-10 |
| CVE-2026-81635 | medium | 5.4 | No | A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a... | 2026-09-10 |
| CVE-2026-81431 | high | 7.2 | No | The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legi... | 2026-09-10 |