Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91168 | medium | 6.8 | No | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until 0.29.0, the Kubernetes request correlator in warp... | 2026-11-04 |
| CVE-2026-97397 | high | 7.2 | No | The Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance plugin for WordPress is vulnerable to Stored Cross... | 2026-11-04 |
| CVE-2026-99265 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-04 |
| CVE-2026-92824 | medium | 6.2 | No | A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithm... | 2026-11-04 |
| CVE-2026-91163 | low | 3.7 | No | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. Prior to 0.29.0, the Kubernetes protocol listener uses AcceptAnyCli... | 2026-11-04 |
| CVE-2026-84729 | not reported | — | No | Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or pot... | 2026-11-04 |
| CVE-2026-86877 | medium | 6.2 | No | A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able... | 2026-11-04 |
| CVE-2026-59263 | medium | 5.5 | No | A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Su... | 2026-11-04 |
| CVE-2026-62126 | high | 7.5 | No | Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on al... | 2026-11-04 |
| CVE-2026-62007 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements... | 2026-11-04 |
| CVE-2026-57775 | medium | 5.3 | No | Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile all... | 2026-11-04 |
| CVE-2026-62000 | high | 7.5 | No | Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access... | 2026-11-04 |
| CVE-2026-77779 | high | 7.7 | No | ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated lo... | 2026-11-04 |
| CVE-2026-64750 | medium | 5.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iP... | 2026-11-04 |
| CVE-2026-42965 | medium | 6.5 | No | A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this vulnerability by creating a Service backed... | 2026-11-04 |
| CVE-2026-57666 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologies WP Customer Area c... | 2026-11-04 |
| CVE-2026-57639 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roland Murg WP Booking System wp-booki... | 2026-11-04 |
| CVE-2026-56065 | high | 7.5 | No | Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Doofinder Doofinder for WooCommerce doofind... | 2026-11-04 |
| CVE-2026-54861 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologies WP Customer Area c... | 2026-11-04 |
| CVE-2026-54851 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesomemotive Contact Form by WPForms... | 2026-11-04 |