Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121632 | not reported | — | No | Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping. process_attrs writes each... | 2026-11-04 |
| CVE-2026-121620 | medium | 6.5 | No | CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authentication vulnerability that allows unauthenticated attackers to forge Z... | 2026-11-04 |
| CVE-2026-121598 | critical | 9.9 | No | A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/... | 2026-11-04 |
| CVE-2026-121583 | medium | 6.3 | No | A vulnerability was identified in Sanluan PublicCMS 5. This affects the function TradePaymentService.pendingRefund of the file publiccms-par... | 2026-11-04 |
| CVE-2026-121535 | low | 3.7 | No | A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPassword of the file ap... | 2026-11-04 |
| CVE-2026-119746 | medium | 5.9 | No | ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E) contain a login lockout bypass in the integrated module web page. The account l... | 2026-11-04 |
| CVE-2026-119745 | medium | 4.3 | No | Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability that allows any authenticated user, including Subsc... | 2026-11-04 |
| CVE-2026-121041 | medium | 6.5 | No | Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a craft... | 2026-11-04 |
| CVE-2026-121039 | medium | 5.3 | No | Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information v... | 2026-11-04 |
| CVE-2026-117927 | medium | 6.3 | No | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an... | 2026-11-04 |
| CVE-2026-117926 | high | 8.1 | No | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thun... | 2026-11-04 |
| CVE-2026-117925 | high | 8.8 | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde... | 2026-11-04 |
| CVE-2026-117924 | medium | 6.3 | No | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, a... | 2026-11-04 |
| CVE-2026-117923 | medium | 6.3 | No | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird... | 2026-11-04 |
| CVE-2026-117922 | high | 8.8 | No | Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,... | 2026-11-04 |
| CVE-2026-117915 | high | 7.3 | No | Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Fi... | 2026-11-04 |
| CVE-2026-117914 | medium | 6.3 | No | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an... | 2026-11-04 |
| CVE-2026-117913 | medium | 6.3 | No | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | 2026-11-04 |
| CVE-2026-117912 | high | 8.1 | No | Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Fir... | 2026-11-04 |
| CVE-2026-117911 | medium | 6.3 | No | Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, T... | 2026-11-04 |