Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116258 | medium | 6.3 | No | A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Suc... | 2026-11-02 |
| CVE-2026-116255 | medium | 5.3 | No | A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function _detail of the fi... | 2026-11-02 |
| CVE-2026-116237 | high | 8.4 | No | A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component Dnsmasq. Performing a manipulation... | 2026-11-02 |
| CVE-2026-116234 | critical | 9.1 | No | A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.conf of the component I... | 2026-11-02 |
| CVE-2026-116231 | critical | 9.9 | No | A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element is an unknown function of the component Ser2net. P... | 2026-11-02 |
| CVE-2026-115923 | medium | 6.5 | No | Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalogRulesEnforcer in @ba... | 2026-11-02 |
| CVE-2026-115916 | medium | 6.5 | No | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_token_id with an off-... | 2026-11-02 |
| CVE-2026-116216 | medium | 5.3 | No | MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attacker... | 2026-11-02 |
| CVE-2026-116212 | medium | 5.4 | No | Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos app that allows authenticated backend us... | 2026-11-02 |
| CVE-2026-116228 | low | 3.3 | No | A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/i... | 2026-11-02 |
| CVE-2026-116119 | medium | 5.5 | No | A vulnerability was found in NocoDB up to 2026.08.0. This affects an unknown part of the file packages/nocodb/src/services/users/users.servi... | 2026-11-02 |
| CVE-2026-115913 | medium | 6.5 | No | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder in phi4mm_audio.py an... | 2026-11-02 |
| CVE-2026-115905 | not reported | — | No | zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File He... | 2026-11-02 |
| CVE-2026-115717 | high | 7.7 | No | Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the convert_to_webp API endpoint, which lacks t... | 2026-11-02 |
| CVE-2026-112344 | medium | 6.8 | No | Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user... | 2026-11-02 |
| CVE-2026-109367 | medium | 5.3 | No | The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is vulne... | 2026-11-02 |
| CVE-2026-109386 | medium | 4.3 | No | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass in all versions up... | 2026-11-02 |
| CVE-2026-107051 | high | 7.5 | No | Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate... | 2026-11-02 |
| CVE-2026-107036 | medium | 5.1 | No | Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impa... | 2026-11-02 |
| CVE-2021-31566 | high | 7.8 | No | An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of... | 2026-11-02 |