Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85135 | medium | 6.3 | No | A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFile... | 2026-09-03 |
| CVE-2026-85110 | high | 8.8 | No | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the com... | 2026-09-03 |
| CVE-2026-85109 | critical | 9.8 | No | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the comp... | 2026-09-03 |
| CVE-2026-84815 | medium | 5.8 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold allows Reflected XSS. T... | 2026-09-03 |
| CVE-2026-85107 | medium | 4.3 | No | A vulnerability was found in NousResearch hermes-agent 0.18.0. This vulnerability affects the function resourceBufferFromUrl of the file app... | 2026-09-03 |
| CVE-2026-85105 | high | 7.3 | No | A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _sess_nowait of the file s71.py of the com... | 2026-09-03 |
| CVE-2026-85100 | medium | 4.3 | No | A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of... | 2026-09-03 |
| CVE-2026-85040 | medium | 4.7 | No | A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi... | 2026-09-03 |
| CVE-2026-85031 | critical | 9.9 | No | A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing... | 2026-09-03 |
| CVE-2026-85022 | low | 3.5 | No | A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/... | 2026-09-03 |
| CVE-2026-85021 | medium | 4.3 | No | A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/(shareLayout)/componen... | 2026-09-03 |
| CVE-2026-3852 | medium | 6.4 | No | The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the Social Media Follow... | 2026-09-03 |
| CVE-2026-2573 | medium | 6.4 | No | The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Si... | 2026-09-03 |
| CVE-2026-84888 | medium | 4.3 | No | A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec of the file crates/op... | 2026-09-03 |
| CVE-2026-84887 | medium | 4.3 | No | A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding... | 2026-09-03 |
| CVE-2026-84885 | medium | 4.3 | No | A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code_agent.py of the componen... | 2026-09-03 |
| CVE-2026-84840 | medium | 6.5 | No | A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the... | 2026-09-03 |
| CVE-2026-84839 | medium | 5.3 | No | A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xm... | 2026-09-03 |
| CVE-2026-84833 | medium | 4.3 | No | A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unkno... | 2026-09-03 |
| CVE-2026-51764 | critical | 9.8 | No | Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to... | 2026-09-03 |