Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-7826 | critical | 9.1 | No | A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4... | 2026-10-15 |
| CVE-2026-63130 | medium | 5.5 | No | EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted... | 2026-10-15 |
| CVE-2026-69194 | medium | 4.8 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise returns th... | 2026-10-15 |
| CVE-2026-69193 | medium | 6.5 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise tracks fai... | 2026-10-15 |
| CVE-2026-64856 | low | 3.7 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/... | 2026-10-15 |
| CVE-2026-62664 | medium | 5.4 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates... | 2026-10-15 |
| CVE-2026-61843 | high | 8.2 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-ena... | 2026-10-15 |
| CVE-2026-57492 | high | 7.4 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise treats an... | 2026-10-15 |
| CVE-2026-57490 | high | 8.1 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrat... | 2026-10-15 |
| CVE-2026-55684 | critical | 9.8 | No | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.ph... | 2026-10-15 |
| CVE-2026-55683 | critical | 9.8 | No | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoin... | 2026-10-15 |
| CVE-2026-55681 | high | 8.8 | No | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module ca... | 2026-10-15 |
| CVE-2026-55680 | critical | 9.8 | No | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranc... | 2026-10-15 |
| CVE-2026-55498 | medium | 4.8 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public sha... | 2026-10-15 |
| CVE-2026-55184 | low | 3.5 | No | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with Email Template or PDF Template edit perm... | 2026-10-15 |
| CVE-2026-53575 | low | 2.7 | No | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an authenticated administrator can place crafted con... | 2026-10-15 |
| CVE-2026-53574 | high | 7.6 | No | EspoCRM is an open source customer relationship management application. From 8.1.0 until 9.3.8, an authenticated non-administrator can submi... | 2026-10-15 |
| CVE-2026-46708 | medium | 4.3 | No | EspoCRM is an open source customer relationship management application. Prior to 9.3.7, a low-privileged user who can access a shared Target... | 2026-10-15 |
| CVE-2026-46691 | medium | 6.5 | No | EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated user with Import scope access can s... | 2026-10-15 |
| CVE-2026-110849 | not reported | — | No | n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes b... | 2026-10-15 |