Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92171 | medium | 6.5 | No | A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator launches the Gossip... | 2026-11-02 |
| CVE-2026-20433 | high | 8.8 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-11-02 |
| CVE-2026-34118 | medium | 6.5 | No | A heap-based buffer overflow vulnerability was identified in multiple TP-Link Tapo cameras in the HTTP POST body parsing logic due to missin... | 2026-11-02 |
| CVE-2026-20469 | medium | 5.8 | No | In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privile... | 2026-11-02 |
| CVE-2026-20500 | medium | 5.0 | No | In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution... | 2026-11-02 |
| CVE-2026-15809 | high | 7.8 | No | A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capab... | 2026-11-02 |
| CVE-2026-120460 | high | 8.8 | No | Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage other workspace... | 2026-11-02 |
| CVE-2026-120456 | medium | 6.1 | No | L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dref_entry() in core/read.c trigg... | 2026-11-02 |
| CVE-2026-120348 | high | 7.3 | No | A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_content of the file... | 2026-11-02 |
| CVE-2026-120343 | medium | 4.3 | No | A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file manageassessment2.... | 2026-11-02 |
| CVE-2026-120339 | medium | 4.3 | No | A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project. This vulnerability affects unknown code of the file updatede... | 2026-11-02 |
| CVE-2026-120334 | medium | 4.3 | No | A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretrained of the file farm/modeling... | 2026-11-02 |
| CVE-2026-120316 | medium | 5.9 | No | http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated at... | 2026-11-02 |
| CVE-2026-120312 | high | 8.8 | No | Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name... | 2026-11-02 |
| CVE-2026-120322 | critical | 9.9 | No | A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file /plugin-api/file-man... | 2026-11-02 |
| CVE-2026-120282 | critical | 9.9 | No | A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulat... | 2026-11-02 |
| CVE-2026-120278 | medium | 5.3 | No | A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7c0 of the file /bin/ioos of th... | 2026-11-02 |
| CVE-2026-120274 | medium | 4.7 | No | A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functionality of the file /iot/script o... | 2026-11-02 |
| CVE-2026-120239 | critical | 9.9 | No | A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of th... | 2026-11-02 |
| CVE-2026-120235 | medium | 4.3 | No | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function parseSSEStream of the file sdks/ty... | 2026-11-02 |