Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-13611 | medium | 5.3 | No | The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated att... | 2026-09-01 |
| CVE-2024-7953 | not reported | — | No | A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If explo... | 2026-09-01 |
| CVE-2026-9637 | not reported | — | No | A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper... | 2026-09-01 |
| CVE-2026-9634 | not reported | — | No | A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path... | 2026-09-01 |
| CVE-2026-9633 | not reported | — | No | A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system pat... | 2026-09-01 |
| CVE-2026-9625 | not reported | — | No | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause... | 2026-09-01 |
| CVE-2026-9624 | not reported | — | No | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to... | 2026-09-01 |
| CVE-2026-9622 | not reported | — | No | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSL... | 2026-09-01 |
| CVE-2026-9621 | not reported | — | No | A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A c... | 2026-09-01 |
| CVE-2026-16675 | not reported | — | No | A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the ins... | 2026-09-01 |
| CVE-2026-12663 | not reported | — | No | A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation... | 2026-09-01 |
| CVE-2026-12661 | not reported | — | No | A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated co... | 2026-09-01 |
| CVE-2026-84235 | not reported | — | No | A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing th... | 2026-09-01 |
| CVE-2026-19472 | not reported | — | No | A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT reque... | 2026-09-01 |
| CVE-2026-84109 | medium | 6.3 | No | A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/web... | 2026-09-01 |
| CVE-2026-84153 | medium | 6.3 | No | A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=... | 2026-09-01 |
| CVE-2026-10195 | high | 8.8 | No | The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient... | 2026-09-01 |
| CVE-2026-84115 | high | 8.3 | No | A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the co... | 2026-09-01 |
| CVE-2026-84114 | medium | 6.3 | No | A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the compo... | 2026-09-01 |
| CVE-2026-84111 | high | 7.3 | No | A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxf_dump_table.php. This manipul... | 2026-09-01 |