Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85582 | medium | 6.5 | No | SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows auth... | 2026-09-08 |
| CVE-2026-85580 | medium | 6.5 | No | SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on... | 2026-09-08 |
| CVE-2026-85579 | medium | 4.3 | No | SiYuan is affected by an information disclosure vulnerability (confirmed in v3.8.1, fixed in v3.8.2) in the reader-accessible POST /api/tran... | 2026-09-08 |
| CVE-2026-85577 | medium | 5.4 | No | AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php that allows unauthenticated attacke... | 2026-09-08 |
| CVE-2026-18664 | critical | 9.1 | No | When ranges are used for access control (i.e. of the form 1.2.3.4-1.2.3.25), because NSD wrongly compares the IP address with the range on l... | 2026-09-08 |
| CVE-2026-86252 | medium | 5.3 | No | h3 versions before 1.15.9 fail to sanitize carriage return characters in EventStream data and comment fields, allowing attackers to inject a... | 2026-09-08 |
| CVE-2026-86205 | medium | 5.4 | No | h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack() utility that fails to sanitize protocol-relative... | 2026-09-08 |
| CVE-2026-86175 | medium | 6.5 | No | NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with o... | 2026-09-08 |
| CVE-2026-86257 | medium | 5.4 | No | wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export endpoint, allowing any gym member to inject s... | 2026-09-08 |
| CVE-2026-86254 | medium | 6.8 | No | wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym... | 2026-09-08 |
| CVE-2026-86711 | high | 7.4 | No | electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sen... | 2026-09-08 |
| CVE-2026-86542 | critical | 9.1 | No | knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write files outside the impo... | 2026-09-08 |
| CVE-2026-86540 | high | 7.8 | No | knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to... | 2026-09-08 |
| CVE-2026-86439 | high | 8.8 | No | knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and del... | 2026-09-08 |
| CVE-2026-86437 | high | 7.2 | No | Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowi... | 2026-09-08 |
| CVE-2026-86713 | high | 7.1 | No | PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the... | 2026-09-08 |
| CVE-2026-86730 | high | 8.8 | No | Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to... | 2026-09-08 |
| CVE-2026-86728 | high | 7.5 | No | AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and priva... | 2026-09-08 |
| CVE-2026-86725 | high | 7.1 | No | AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in the SocialMediaPublisher plugin's... | 2026-09-08 |
| CVE-2026-86723 | high | 8.1 | No | AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge() t... | 2026-09-08 |