Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110844 | not reported | — | No | n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access... | 2026-10-15 |
| CVE-2026-110726 | medium | 6.5 | No | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from t... | 2026-10-15 |
| CVE-2026-110810 | low | 2.8 | No | A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp o... | 2026-10-15 |
| CVE-2026-110809 | medium | 4.3 | No | A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of... | 2026-10-15 |
| CVE-2026-110696 | medium | 5.3 | No | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected elem... | 2026-10-15 |
| CVE-2026-110777 | medium | 5.7 | No | A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted... | 2026-10-15 |
| CVE-2026-110695 | medium | 6.3 | No | A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.p... | 2026-10-15 |
| CVE-2026-110679 | high | 7.3 | No | A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the com... | 2026-10-15 |
| CVE-2026-110670 | high | 7.3 | No | A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component A... | 2026-10-15 |
| CVE-2026-110666 | medium | 6.5 | No | A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upl... | 2026-10-15 |
| CVE-2026-110025 | high | 7.3 | No | A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/cont... | 2026-10-15 |
| CVE-2026-109702 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry Social Share Buttons share-... | 2026-10-15 |
| CVE-2026-109686 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affect... | 2026-10-15 |
| CVE-2026-109695 | high | 7.5 | No | Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve Embedded Sensitive D... | 2026-10-15 |
| CVE-2026-109827 | medium | 6.3 | No | A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools... | 2026-10-15 |
| CVE-2026-109524 | medium | 5.3 | No | A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by... | 2026-10-15 |
| CVE-2026-109520 | high | 8.8 | No | A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenM... | 2026-10-15 |
| CVE-2026-109407 | low | 3.1 | No | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/gen... | 2026-10-15 |
| CVE-2026-109403 | high | 7.3 | No | A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCa... | 2026-10-15 |
| CVE-2026-109110 | critical | 10.0 | No | A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manip... | 2026-10-15 |