Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-57846 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-15 |
| CVE-2026-57844 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-15 |
| CVE-2026-66078 | medium | 5.5 | No | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, protected tag bypass via bulk-delet... | 2026-10-15 |
| CVE-2026-67222 | medium | 6.5 | No | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, mechanisms/1 applied list_to_atom/1 to e... | 2026-10-15 |
| CVE-2026-110374 | medium | 4.3 | No | Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured... | 2026-10-15 |
| CVE-2026-109689 | medium | 5.3 | No | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access C... | 2026-10-15 |
| CVE-2026-110890 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-f... | 2026-10-15 |
| CVE-2026-110371 | medium | 4.3 | No | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Cont... | 2026-10-15 |
| CVE-2026-110367 | medium | 5.3 | No | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access... | 2026-10-15 |
| CVE-2026-108175 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-... | 2026-10-15 |
| CVE-2026-103350 | medium | 5.3 | No | Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-fo... | 2026-10-15 |
| CVE-2026-110958 | critical | 10.0 | No | A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipul... | 2026-10-15 |
| CVE-2026-67223 | high | 7.1 | No | RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains... | 2026-10-15 |
| CVE-2026-96611 | high | 7.8 | No | FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF i... | 2026-10-15 |
| CVE-2026-83038 | critical | 9.9 | No | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that ar... | 2026-10-15 |
| CVE-2026-18111 | medium | 6.1 | No | Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Feature, Feature Link, Hero Image, and Image blocks a... | 2026-10-15 |
| CVE-2026-30754 | high | 8.8 | No | A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264... | 2026-10-15 |
| CVE-2026-97853 | not reported | — | No | Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full resul... | 2026-10-15 |
| CVE-2026-95702 | not reported | — | No | Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard cont... | 2026-10-15 |
| CVE-2026-93861 | not reported | — | No | In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workf... | 2026-10-15 |