Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77699 | medium | 5.0 | No | Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an... | 2026-09-08 |
| CVE-2026-77697 | medium | 6.3 | No | Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction | 2026-09-08 |
| CVE-2026-77698 | medium | 5.7 | No | Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade. | 2026-09-08 |
| CVE-2026-14828 | high | 8.8 | No | Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405... | 2026-09-08 |
| CVE-2026-86667 | medium | 4.7 | No | A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list of the file controlle... | 2026-09-08 |
| CVE-2026-86665 | high | 7.3 | No | A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/... | 2026-09-08 |
| CVE-2026-86644 | low | 3.5 | No | A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file web_src/public/editor.md/... | 2026-09-08 |
| CVE-2026-78602 | medium | 5.3 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Elastic Maps Server can lead to information discl... | 2026-09-08 |
| CVE-2026-86232 | medium | 6.3 | No | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of... | 2026-09-08 |
| CVE-2026-86225 | high | 7.3 | No | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysql... | 2026-09-08 |
| CVE-2026-86220 | high | 7.3 | No | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqli_query of t... | 2026-09-08 |
| CVE-2026-86179 | medium | 5.3 | No | A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of the file /Daily-Expense-Manager/exp_ak.... | 2026-09-08 |
| CVE-2026-86168 | high | 7.3 | No | A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file... | 2026-09-08 |
| CVE-2026-86167 | critical | 9.9 | No | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the... | 2026-09-08 |
| CVE-2026-86163 | medium | 6.3 | No | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro_del.p... | 2026-09-08 |
| CVE-2026-86153 | critical | 9.1 | No | A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Red... | 2026-09-08 |
| CVE-2026-86148 | critical | 9.1 | No | A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of... | 2026-09-08 |
| CVE-2026-85701 | medium | 5.3 | No | A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function... | 2026-09-08 |
| CVE-2026-85643 | medium | 4.7 | No | A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_query of the file admin/adduser.php. Exec... | 2026-09-08 |
| CVE-2026-85636 | medium | 5.3 | No | A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py o... | 2026-09-08 |