Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81771 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in TrustedSite <= 1.2.5 versions. | 2026-09-02 |
| CVE-2026-81294 | critical | 9.8 | No | Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions. | 2026-09-02 |
| CVE-2026-81289 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.13.1 versions. | 2026-09-02 |
| CVE-2026-81283 | high | 8.8 | No | Subscriber PHP Object Injection in WP User Frontend <= 4.3.10 versions. | 2026-09-02 |
| CVE-2026-84267 | medium | 4.3 | No | A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to allocate a buffer wi... | 2026-09-02 |
| CVE-2026-53622 | critical | 10.0 | No | Traefik is an HTTP reverse proxy and load balancer. Versions prior to 3.7.3, 3.6.18, and 2.11.51 have a critical vulnerability in Traefik's... | 2026-09-02 |
| CVE-2026-48491 | critical | 10.0 | No | Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-front... | 2026-09-02 |
| CVE-2026-48020 | critical | 10.0 | No | Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's... | 2026-09-02 |
| CVE-2026-19478 | critical | 9.1 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and... | 2026-09-02 |
| CVE-2026-61760 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61761 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61762 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61763 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61764 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61765 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61766 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61767 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61768 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61769 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |
| CVE-2026-61770 | high | 7.8 | No | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of t... | 2026-09-02 |