Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-61318 | critical | 9.1 | No | Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/... | 2026-10-15 |
| CVE-2025-14245 | critical | 9.8 | No | A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/index/Coupon.php. Such... | 2026-10-15 |
| CVE-2026-110202 | high | 8.8 | No | Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers to auto-approve denie... | 2026-10-15 |
| CVE-2026-110203 | high | 8.8 | No | Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abus... | 2026-10-15 |
| CVE-2026-110204 | high | 8.8 | No | Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCom... | 2026-10-15 |
| CVE-2026-103821 | high | 7.8 | No | Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of t... | 2026-10-15 |
| CVE-2026-103822 | medium | 5.5 | No | Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker cou... | 2026-10-15 |
| CVE-2026-103823 | medium | 5.5 | No | Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An... | 2026-10-15 |
| CVE-2026-103824 | medium | 5.5 | No | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An att... | 2026-10-15 |
| CVE-2026-103825 | medium | 5.5 | No | Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker cou... | 2026-10-15 |
| CVE-2026-103826 | medium | 5.5 | No | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An att... | 2026-10-15 |
| CVE-2026-103827 | medium | 5.5 | No | Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An... | 2026-10-15 |
| CVE-2026-103828 | medium | 5.5 | No | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An att... | 2026-10-15 |
| CVE-2026-103829 | medium | 5.5 | No | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An att... | 2026-10-15 |
| CVE-2026-106620 | critical | 9.6 | No | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker... | 2026-10-15 |
| CVE-2026-100116 | medium | 5.9 | No | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An a... | 2026-10-15 |
| CVE-2026-100121 | high | 7.5 | No | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An a... | 2026-10-15 |
| CVE-2026-100135 | high | 7.5 | No | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacke... | 2026-10-15 |
| CVE-2026-69435 | high | 8.1 | No | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | 2026-10-15 |
| CVE-2026-48378 | medium | 5.3 | No | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacke... | 2026-10-15 |