Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-19219 | high | 8.1 | No | In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor... | 2026-09-08 |
| CVE-2026-18672 | high | 7.5 | No | In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an atta... | 2026-09-08 |
| CVE-2026-86673 | high | 7.3 | No | A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issu... | 2026-09-08 |
| CVE-2026-86670 | low | 3.7 | No | A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the compo... | 2026-09-08 |
| CVE-2026-86669 | high | 7.3 | No | A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php... | 2026-09-08 |
| CVE-2026-86477 | not reported | — | No | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descri... | 2026-09-08 |
| CVE-2026-86287 | high | 7.5 | No | Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treat... | 2026-09-08 |
| CVE-2026-86304 | critical | 9.8 | No | MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::PO... | 2026-09-08 |
| CVE-2026-86283 | not reported | — | No | MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a secondary query of member events by UUID witho... | 2026-09-08 |
| CVE-2026-86237 | medium | 5.3 | No | A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the function test_default_model of the file sd... | 2026-09-08 |
| CVE-2026-86219 | critical | 9.8 | No | Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.... | 2026-09-08 |
| CVE-2026-86164 | medium | 6.3 | No | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/trans... | 2026-09-08 |
| CVE-2026-86162 | high | 7.3 | No | A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /ajax.php?action=log... | 2026-09-08 |
| CVE-2026-86159 | high | 7.3 | No | A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_user. Th... | 2026-09-08 |
| CVE-2026-86149 | critical | 9.1 | No | A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This m... | 2026-09-08 |
| CVE-2026-85229 | medium | 6.1 | No | ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache... | 2026-09-08 |
| CVE-2026-82751 | not reported | — | No | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cos... | 2026-09-08 |
| CVE-2026-82750 | not reported | — | No | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cos... | 2026-09-08 |
| CVE-2026-82752 | not reported | — | No | Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in... | 2026-09-08 |
| CVE-2026-82309 | medium | 4.3 | No | Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation l... | 2026-09-08 |