Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-120231 | critical | 9.9 | No | A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of... | 2026-11-02 |
| CVE-2026-120227 | critical | 9.9 | No | A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file static_route_setting.sh... | 2026-11-02 |
| CVE-2026-120223 | low | 3.1 | No | A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the file session.lua of the c... | 2026-11-02 |
| CVE-2026-120208 | high | 7.5 | No | libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::processTile() that allows... | 2026-11-02 |
| CVE-2026-120197 | critical | 9.9 | No | A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipula... | 2026-11-02 |
| CVE-2026-120191 | high | 7.3 | No | A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. Th... | 2026-11-02 |
| CVE-2026-119096 | critical | 9.8 | No | The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via th... | 2026-11-02 |
| CVE-2026-119980 | medium | 6.5 | No | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to unauthorized a... | 2026-11-02 |
| CVE-2026-117349 | medium | 5.3 | No | Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue. | 2026-11-02 |
| CVE-2026-116543 | high | 7.5 | No | Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() that allows unauthenticated attackers to... | 2026-11-02 |
| CVE-2026-116539 | medium | 5.9 | No | Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer BIO callback caused by... | 2026-11-02 |
| CVE-2026-116492 | medium | 6.5 | No | Frappe CRM app before 1.89.1 contains a missing authorization vulnerability that allows authenticated low-privileged users to read CRM Lead... | 2026-11-02 |
| CVE-2026-116485 | critical | 9.8 | No | danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment c... | 2026-11-02 |
| CVE-2026-116463 | medium | 6.3 | No | A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Box-Average Downs... | 2026-11-02 |
| CVE-2026-116384 | medium | 6.3 | No | A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerability affects unknown code of the component... | 2026-11-02 |
| CVE-2026-116367 | medium | 6.3 | No | A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/e... | 2026-11-02 |
| CVE-2026-116284 | medium | 4.3 | No | A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /general/user-info of... | 2026-11-02 |
| CVE-2026-116281 | low | 3.3 | No | A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-eng... | 2026-11-02 |
| CVE-2026-116274 | medium | 4.3 | No | A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderController.php of the comp... | 2026-11-02 |
| CVE-2026-116261 | low | 3.5 | No | A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afc_file_open of the file src/afc.c of... | 2026-11-02 |