Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116688 | high | 8.1 | No | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerab... | 2026-11-02 |
| CVE-2026-117506 | medium | 4.3 | No | A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setIn... | 2026-11-02 |
| CVE-2026-117504 | medium | 5.3 | No | A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/d... | 2026-11-02 |
| CVE-2026-116684 | medium | 6.8 | No | The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 an... | 2026-11-02 |
| CVE-2026-116682 | high | 8.6 | No | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/... | 2026-11-02 |
| CVE-2026-116677 | not reported | — | No | OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI management. From 1.0.0 unt... | 2026-11-02 |
| CVE-2026-116674 | medium | 6.5 | No | systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, O... | 2026-11-02 |
| CVE-2026-115930 | medium | 6.8 | No | The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate sto... | 2026-11-02 |
| CVE-2026-115693 | not reported | — | No | Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to... | 2026-11-02 |
| CVE-2026-105606 | not reported | — | No | Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8 - An unauthenticated attacker can upload... | 2026-11-02 |
| CVE-2026-107457 | not reported | — | No | A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client an... | 2026-11-02 |
| CVE-2026-105780 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the co... | 2026-11-02 |
| CVE-2026-105779 | critical | 9.1 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | 2026-11-02 |
| CVE-2026-105765 | high | 7.5 | No | HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's service mesh leaf certifi... | 2026-11-02 |
| CVE-2026-101186 | high | 7.5 | No | DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |
| CVE-2026-104310 | medium | 4.3 | No | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side reque... | 2026-11-02 |
| CVE-2026-104351 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in... | 2026-11-02 |
| CVE-2026-104350 | critical | 9.3 | No | Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerabili... | 2026-11-02 |
| CVE-2026-104189 | high | 7.5 | No | The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions... | 2026-11-02 |
| CVE-2026-101184 | medium | 5.5 | No | Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |