Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-120336 | high | 7.3 | No | A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevD... | 2026-11-02 |
| CVE-2026-120335 | medium | 4.8 | No | A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding_LM.load of the file farm/modeling/lang... | 2026-11-02 |
| CVE-2026-120324 | high | 8.3 | No | A weakness has been identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2. The affected element is the function Path.resolve of the file... | 2026-11-02 |
| CVE-2026-120283 | critical | 10.0 | No | A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such man... | 2026-11-02 |
| CVE-2026-120279 | critical | 10.0 | No | A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component... | 2026-11-02 |
| CVE-2026-120275 | medium | 5.5 | No | A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Fi... | 2026-11-02 |
| CVE-2026-120240 | critical | 9.9 | No | A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the c... | 2026-11-02 |
| CVE-2026-120236 | medium | 6.3 | No | A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown functionality of the compone... | 2026-11-02 |
| CVE-2026-66570 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File Upload wp-file... | 2026-11-02 |
| CVE-2026-62048 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit a... | 2026-11-02 |
| CVE-2026-119480 | medium | 6.5 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilder jetformbuilder all... | 2026-11-02 |
| CVE-2026-120232 | high | 8.8 | No | A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the... | 2026-11-02 |
| CVE-2026-120228 | critical | 9.9 | No | A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the co... | 2026-11-02 |
| CVE-2026-120224 | critical | 9.9 | No | A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run_async_task of the c... | 2026-11-02 |
| CVE-2026-120198 | critical | 10.0 | No | A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. S... | 2026-11-02 |
| CVE-2026-120192 | medium | 5.3 | No | A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the compone... | 2026-11-02 |
| CVE-2026-120185 | medium | 4.7 | No | A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file app/admin/control... | 2026-11-02 |
| CVE-2026-15272 | medium | 6.5 | No | The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parameter in all versions u... | 2026-11-02 |
| CVE-2026-96554 | medium | 6.4 | No | The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions up to, and including... | 2026-11-02 |
| CVE-2026-76010 | high | 8.8 | No | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all version... | 2026-11-02 |