Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86300 | high | 7.3 | No | A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipu... | 2026-09-08 |
| CVE-2026-86295 | high | 8.3 | No | A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the componen... | 2026-09-08 |
| CVE-2026-86290 | high | 7.3 | No | A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?act... | 2026-09-08 |
| CVE-2026-86282 | high | 7.3 | No | A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an un... | 2026-09-08 |
| CVE-2026-86277 | high | 7.3 | No | A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown funct... | 2026-09-08 |
| CVE-2026-86233 | medium | 6.3 | No | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functional... | 2026-09-08 |
| CVE-2026-86226 | low | 3.5 | No | A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of th... | 2026-09-08 |
| CVE-2026-86214 | high | 7.3 | No | A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This... | 2026-09-08 |
| CVE-2026-86209 | high | 7.3 | No | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /delete_... | 2026-09-08 |
| CVE-2026-86180 | high | 7.3 | No | A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionalit... | 2026-09-08 |
| CVE-2026-85201 | not reported | — | No | In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf m... | 2026-09-08 |
| CVE-2026-85787 | medium | 6.5 | No | An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might all... | 2026-09-08 |
| CVE-2026-85050 | critical | 9.6 | No | Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outsi... | 2026-09-08 |
| CVE-2026-84173 | not reported | — | No | In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rul... | 2026-09-08 |
| CVE-2026-82684 | high | 8.1 | No | Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attac... | 2026-09-08 |
| CVE-2026-33197 | not reported | — | No | AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Su... | 2026-09-08 |
| CVE-2026-19204 | not reported | — | No | A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory... | 2026-09-08 |
| CVE-2026-85051 | high | 8.8 | No | Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox... | 2026-09-08 |
| CVE-2026-85052 | low | 3.1 | No | Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer proc... | 2026-09-08 |
| CVE-2026-85053 | high | 8.8 | No | Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code insid... | 2026-09-08 |