Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-96741 | high | 7.2 | No | The DSGVO All in one for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Co... | 2026-10-29 |
| CVE-2026-96669 | high | 7.2 | No | The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'service_type' Cookie i... | 2026-10-29 |
| CVE-2026-96666 | high | 7.2 | No | The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via 'Remove Microdata'... | 2026-10-29 |
| CVE-2026-96228 | high | 8.1 | No | SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.8.1. The public f... | 2026-10-29 |
| CVE-2026-93904 | high | 7.5 | No | The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic SQL Injection via the... | 2026-10-29 |
| CVE-2026-93865 | not reported | — | No | A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to in... | 2026-10-29 |
| CVE-2026-93864 | not reported | — | No | A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged s... | 2026-10-29 |
| CVE-2026-93857 | not reported | — | No | A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code b... | 2026-10-29 |
| CVE-2026-94347 | high | 7.2 | No | PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,... | 2026-10-29 |
| CVE-2026-94346 | high | 7.2 | No | PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,... | 2026-10-29 |
| CVE-2026-93855 | high | 7.5 | No | The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' parameter in all versions up... | 2026-10-29 |
| CVE-2026-93757 | high | 7.5 | No | The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Binding in all versions u... | 2026-10-29 |
| CVE-2026-90465 | not reported | — | No | A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as... | 2026-10-29 |
| CVE-2026-90729 | medium | 6.7 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-90728 | medium | 6.3 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-92709 | high | 8.1 | No | Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allow... | 2026-10-29 |
| CVE-2026-87880 | medium | 6.8 | No | Sensitive information disclosure due to missing SSL certificate verification affecting one component. The following products are affected: A... | 2026-10-29 |
| CVE-2026-87878 | medium | 6.3 | No | Linux binaries have executable stack attribute enabled. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 4... | 2026-10-29 |
| CVE-2026-87103 | high | 7.4 | No | Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Prote... | 2026-10-29 |
| CVE-2026-87102 | high | 7.4 | No | Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Prote... | 2026-10-29 |