Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92186 | high | 8.8 | No | Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows... | 2026-11-04 |
| CVE-2026-92185 | high | 7.2 | No | Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows r... | 2026-11-04 |
| CVE-2026-97693 | critical | 9.9 | No | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there i... | 2026-11-04 |
| CVE-2026-76893 | not reported | — | No | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.2, the HTTP mode of @tsparticles/mcp-... | 2026-11-04 |
| CVE-2026-63655 | high | 7.5 | No | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-... | 2026-11-04 |
| CVE-2026-58128 | medium | 6.2 | No | Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious appl... | 2026-11-04 |
| CVE-2026-57567 | high | 8.6 | No | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. In affected... | 2026-11-04 |
| CVE-2026-57566 | critical | 9.3 | No | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.1... | 2026-11-04 |
| CVE-2026-57565 | medium | 6.5 | No | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.1... | 2026-11-04 |
| CVE-2026-57562 | medium | 6.5 | No | Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.1... | 2026-11-04 |
| CVE-2026-55368 | high | 8.1 | No | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-l... | 2026-11-04 |
| CVE-2026-55367 | high | 7.5 | No | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506a073505fd389db16ad2ba4e582a0, a client could... | 2026-11-04 |
| CVE-2026-54380 | medium | 5.4 | No | VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated attackers to upload an S... | 2026-11-04 |
| CVE-2026-54379 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-04 |
| CVE-2026-54378 | critical | 9.6 | No | VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user to obtain temporary A... | 2026-11-04 |
| CVE-2026-54377 | medium | 6.5 | No | VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticated attackers to acces... | 2026-11-04 |
| CVE-2026-54376 | high | 8.2 | No | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows a malicious app... | 2026-11-04 |
| CVE-2026-54375 | high | 8.4 | No | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that allows attackers to e... | 2026-11-04 |
| CVE-2026-54374 | high | 7.5 | No | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows attackers to extract... | 2026-11-04 |
| CVE-2026-54373 | low | 3.5 | No | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-based attackers t... | 2026-11-04 |