Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116280 | medium | 5.5 | No | A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the file client-engine-ap... | 2026-10-31 |
| CVE-2026-116219 | high | 7.2 | No | Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets authenticated admin... | 2026-10-31 |
| CVE-2026-116215 | low | 3.1 | No | MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one... | 2026-10-31 |
| CVE-2026-116263 | medium | 4.6 | No | A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the file src/inc/core.php... | 2026-10-31 |
| CVE-2026-116260 | high | 7.3 | No | A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the... | 2026-10-31 |
| CVE-2026-116257 | high | 7.3 | No | A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of the file src/BillaBea... | 2026-10-31 |
| CVE-2026-116254 | medium | 6.5 | No | A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. This issue affects the function verifyipran... | 2026-10-31 |
| CVE-2026-115924 | high | 8.6 | No | Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model th... | 2026-10-31 |
| CVE-2026-115921 | medium | 6.2 | No | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunctio... | 2026-10-31 |
| CVE-2026-115917 | medium | 4.7 | No | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMi... | 2026-10-31 |
| CVE-2026-102649 | critical | 9.9 | No | Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhook` accepts unsigned... | 2026-10-31 |
| CVE-2026-115910 | medium | 6.8 | No | Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_core/backends/open_id_... | 2026-10-31 |
| CVE-2026-115906 | medium | 6.5 | No | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry reader in src/aes.rs... | 2026-10-31 |
| CVE-2026-112343 | high | 8.1 | No | Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permis... | 2026-10-31 |
| CVE-2026-116210 | medium | 6.5 | No | Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remote attackers to perfo... | 2026-10-31 |
| CVE-2013-10077 | medium | 5.3 | No | A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/server/ajax/settings.py o... | 2026-10-31 |
| CVE-2026-116236 | high | 7.2 | No | A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugin_init of the file /tmp/upload_f... | 2026-10-31 |
| CVE-2026-116233 | critical | 9.1 | No | A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown function of the component Dnsmasq. The m... | 2026-10-31 |
| CVE-2026-116230 | high | 7.8 | No | A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the com... | 2026-10-31 |
| CVE-2026-116227 | low | 2.4 | No | A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The m... | 2026-10-31 |