Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86285 | medium | 4.3 | No | A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the f... | 2026-09-09 |
| CVE-2026-86279 | medium | 6.3 | No | A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an u... | 2026-09-09 |
| CVE-2026-86276 | high | 7.3 | No | A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown proce... | 2026-09-09 |
| CVE-2026-86271 | medium | 4.7 | No | A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the file src/Backend/FluentCMS.Services/Permi... | 2026-09-09 |
| CVE-2026-86234 | medium | 6.3 | No | A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust_transac.ph... | 2026-09-09 |
| CVE-2026-86227 | low | 3.1 | No | A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.... | 2026-09-09 |
| CVE-2026-86222 | high | 7.3 | No | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqli_query of the file /... | 2026-09-09 |
| CVE-2026-86215 | medium | 4.3 | No | A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/serv... | 2026-09-09 |
| CVE-2026-6431 | high | 7.2 | No | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored... | 2026-09-09 |
| CVE-2026-17622 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation... | 2026-09-09 |
| CVE-2026-17627 | high | 7.1 | No | IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into w... | 2026-09-09 |
| CVE-2026-17631 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to a server-side reque... | 2026-09-09 |
| CVE-2026-19649 | medium | 5.5 | No | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1... | 2026-09-09 |
| CVE-2026-78543 | high | 7.5 | No | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1... | 2026-09-09 |
| CVE-2026-16180 | medium | 5.7 | No | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1... | 2026-09-09 |
| CVE-2026-17274 | medium | 5.4 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds. | 2026-09-09 |
| CVE-2026-86256 | medium | 5.4 | No | wger before 2.6 (affected versions <= 2.5.0) contains an open redirect vulnerability in the trainer_login view (wger/core/views/user.py). Af... | 2026-09-09 |
| CVE-2026-86251 | medium | 5.9 | No | h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path co... | 2026-09-09 |
| CVE-2026-86210 | high | 7.3 | No | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unk... | 2026-09-09 |
| CVE-2026-86181 | low | 3.5 | No | A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /use... | 2026-09-09 |