Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-66786 | high | 7.5 | No | OpenAirInterface CN5G AMF | 2026-11-04 |
| CVE-2025-66686 | medium | 6.1 | No | A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An authenticated attacker with administrative privileges... | 2026-11-04 |
| CVE-2025-61489 | medium | 6.5 | No | A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via... | 2026-11-04 |
| CVE-2025-66838 | medium | 6.5 | No | In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, allowing users to upl... | 2026-11-04 |
| CVE-2025-60534 | critical | 9.8 | No | Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy requests i... | 2026-11-04 |
| CVE-2025-65212 | critical | 9.8 | No | An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient c... | 2026-11-04 |
| CVE-2025-60262 | critical | 9.8 | No | An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulne... | 2026-11-04 |
| CVE-2025-59379 | high | 7.5 | No | DwyerOmega Isensix Advanced Remote Monitoring System (ARMS) 1.5.7 allows an attacker to retrieve sensitive information from the underlying S... | 2026-11-04 |
| CVE-2025-67427 | medium | 6.5 | No | A Blind Server-Side Request Forgery (SSRF) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to force the server to... | 2026-11-04 |
| CVE-2025-67419 | high | 7.5 | No | A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust the application server's res... | 2026-11-04 |
| CVE-2025-67397 | critical | 9.1 | No | An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific p... | 2026-11-04 |
| CVE-2025-52517 | medium | 5.9 | No | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race c... | 2026-11-04 |
| CVE-2025-52515 | medium | 5.1 | No | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race c... | 2026-11-04 |
| CVE-2025-49495 | high | 8.4 | No | An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an NL80211 vendor comma... | 2026-11-04 |
| CVE-2025-43706 | high | 7.5 | No | An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2400, 1580, 9110, W920,... | 2026-11-04 |
| CVE-2025-27807 | critical | 9.1 | No | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380,... | 2026-11-04 |
| CVE-2025-65922 | medium | 4.3 | No | PLANKA 2.0.0 lacks X-Frame-Options and CSP frame-ancestors headers, allowing the application to be embedded within malicious iframes. While... | 2026-11-04 |
| CVE-2025-67316 | medium | 5.4 | No | An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitrary code via a crafted webpage in the built-in Hey... | 2026-11-04 |
| CVE-2025-57836 | high | 7.8 | No | An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions d... | 2026-11-04 |
| CVE-2025-52519 | high | 7.1 | No | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Impr... | 2026-11-04 |