Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116888 | medium | 5.4 | No | SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with the smw-schemaedit rig... | 2026-10-31 |
| CVE-2026-116884 | medium | 6.1 | No | SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data... | 2026-10-31 |
| CVE-2026-116842 | medium | 6.1 | No | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening... | 2026-10-31 |
| CVE-2026-116828 | medium | 4.9 | No | YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed in an unquoted INTE... | 2026-10-31 |
| CVE-2026-116824 | medium | 6.1 | No | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allows unauthenticated a... | 2026-10-31 |
| CVE-2026-116816 | high | 7.8 | No | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corr... | 2026-10-31 |
| CVE-2026-116820 | medium | 5.3 | No | YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL... | 2026-10-31 |
| CVE-2026-116815 | medium | 4.3 | No | OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated project members to break C... | 2026-10-31 |
| CVE-2026-116811 | high | 8.8 | No | OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member to bypass the AST al... | 2026-10-31 |
| CVE-2026-116807 | medium | 6.5 | No | OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping by injecting unescap... | 2026-10-31 |
| CVE-2026-116803 | medium | 6.1 | No | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an IN_PLACE ho... | 2026-10-31 |
| CVE-2026-116748 | high | 8.8 | No | Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmissio... | 2026-10-31 |
| CVE-2026-116623 | high | 7.3 | No | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/w... | 2026-10-31 |
| CVE-2026-116605 | medium | 5.3 | No | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.p... | 2026-10-31 |
| CVE-2026-116602 | medium | 6.5 | No | A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/del... | 2026-10-31 |
| CVE-2026-116744 | medium | 5.3 | No | ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name u... | 2026-10-31 |
| CVE-2026-116740 | medium | 6.5 | No | libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote attackers to crash consu... | 2026-10-31 |
| CVE-2026-116554 | low | 3.5 | No | A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla-frontend/components... | 2026-10-31 |
| CVE-2026-57193 | not reported | — | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-10-31 |
| CVE-2026-89209 | medium | 6.8 | No | A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All v... | 2026-10-31 |