Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118578 | medium | 4.3 | No | A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the comp... | 2026-11-03 |
| CVE-2026-118640 | medium | 5.4 | No | n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only users to register r... | 2026-11-03 |
| CVE-2026-118537 | medium | 4.3 | No | A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catalog/components/Image.... | 2026-11-03 |
| CVE-2026-118266 | medium | 5.3 | No | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's MethodOverride middleware accepts a safe HTTP method as the override target fo... | 2026-11-03 |
| CVE-2026-117574 | critical | 9.1 | No | A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request s... | 2026-11-03 |
| CVE-2026-118258 | low | 3.7 | No | i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.4, interpo... | 2026-11-03 |
| CVE-2026-118254 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination language strings into... | 2026-11-03 |
| CVE-2026-111464 | medium | 5.9 | No | The WP Fastest Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.3. The p... | 2026-11-03 |
| CVE-2026-117069 | high | 7.5 | No | An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker t... | 2026-11-03 |
| CVE-2026-106803 | critical | 9.8 | No | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted application/... | 2026-11-03 |
| CVE-2026-103799 | critical | 9.6 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-11-03 |
| CVE-2026-119574 | medium | 5.9 | No | Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attackers to crash the proce... | 2026-11-03 |
| CVE-2026-119718 | high | 7.8 | No | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc()... | 2026-11-03 |
| CVE-2026-86383 | medium | 6.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 rele... | 2026-11-03 |
| CVE-2026-59176 | high | 7.8 | No | Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP tool in `functype-mcp-se... | 2026-11-03 |
| CVE-2026-58256 | critical | 9.1 | No | GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject ma... | 2026-11-03 |
| CVE-2026-57192 | not reported | — | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-11-03 |
| CVE-2026-118250 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6.1, and 3.1.0, Highcharts follows dot-separated se... | 2026-11-03 |
| CVE-2026-118246 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts applies breadcrumbs.st... | 2026-11-03 |
| CVE-2026-118375 | high | 8.1 | No | llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() function that allows... | 2026-11-03 |