Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100209 | high | 8.8 | No | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2025-34291 | high | 8.8 | Listed | Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An over... | 2026-10-15 |
| CVE-2026-77470 | not reported | — | No | Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop POST /api/v2/Shop/Checkout/Process flow ac... | 2026-10-15 |
| CVE-2026-77466 | not reported | — | No | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options... | 2026-10-15 |
| CVE-2026-61838 | not reported | — | No | Lychee is a free, open-source photo-management tool. Prior to 7.6.3, GET /api/v2/Zip authorizes album and photo archives through AlbumPolicy... | 2026-10-15 |
| CVE-2026-57569 | not reported | — | No | Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resol... | 2026-10-15 |
| CVE-2026-71490 | high | 7.1 | No | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\Core\ACL::hasPrivilege() appends a directly assigned c... | 2026-10-15 |
| CVE-2026-58395 | medium | 4.3 | No | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through ApiMutableModelCon... | 2026-10-15 |
| CVE-2026-58394 | medium | 5.2 | No | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/system_advanced_admin.php reads certificate rec... | 2026-10-15 |
| CVE-2026-58393 | medium | 5.9 | No | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override common_name field... | 2026-10-15 |
| CVE-2026-58392 | medium | 5.4 | No | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd v... | 2026-10-15 |
| CVE-2026-57155 | critical | 9.9 | No | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and p... | 2026-10-15 |
| CVE-2026-110934 | medium | 4.4 | No | Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: bef... | 2026-10-15 |
| CVE-2026-110933 | medium | 4.4 | No | Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before fb10a5c8b833... | 2026-10-15 |
| CVE-2026-93484 | not reported | — | No | Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lac... | 2026-10-15 |
| CVE-2026-55387 | not reported | — | No | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. In versi... | 2026-10-15 |
| CVE-2026-55386 | not reported | — | No | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to... | 2026-10-15 |
| CVE-2026-55384 | not reported | — | No | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to... | 2026-10-15 |
| CVE-2026-55383 | high | 8.2 | No | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to... | 2026-10-15 |
| CVE-2026-55382 | high | 7.6 | No | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to... | 2026-10-15 |