Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110536 | critical | 10.0 | No | A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP... | 2026-10-15 |
| CVE-2026-109688 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free lin... | 2026-10-15 |
| CVE-2026-109694 | critical | 9.8 | No | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Flue... | 2026-10-15 |
| CVE-2026-109671 | high | 7.3 | No | Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile field that is rende... | 2026-10-15 |
| CVE-2026-109666 | medium | 6.5 | No | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enfo... | 2026-10-15 |
| CVE-2026-109661 | medium | 6.5 | No | Frappe ERPNext before 15.116.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoints that fail to enfo... | 2026-10-15 |
| CVE-2026-109656 | medium | 6.5 | No | Frappe ERPNext before 15.118.2 and 16.x before 16.30.0 contains a missing authorization vulnerability in which certain endpoints fail to enf... | 2026-10-15 |
| CVE-2026-109651 | medium | 4.3 | No | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field,... | 2026-10-15 |
| CVE-2026-109646 | medium | 6.5 | No | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input valida... | 2026-10-15 |
| CVE-2026-109641 | medium | 6.5 | No | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enfo... | 2026-10-15 |
| CVE-2026-109636 | medium | 6.5 | No | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability because certain endpoints fail to enfo... | 2026-10-15 |
| CVE-2026-109631 | medium | 6.5 | No | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation,... | 2026-10-15 |
| CVE-2026-109626 | medium | 6.5 | No | Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticate... | 2026-10-15 |
| CVE-2026-109621 | medium | 6.5 | No | Frappe ERPNext before 15.120.0 and 16.x before 16.23.0 contains an authorization bypass in an endpoint that honours a caller-supplied flag d... | 2026-10-15 |
| CVE-2026-109613 | high | 7.1 | No | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in which certain endpoints fail to enf... | 2026-10-15 |
| CVE-2026-109608 | high | 8.8 | No | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validati... | 2026-10-15 |
| CVE-2026-109600 | medium | 5.3 | No | Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow em... | 2026-10-15 |
| CVE-2026-108957 | medium | 6.3 | No | A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is t... | 2026-10-15 |
| CVE-2026-108948 | medium | 5.4 | No | A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/sy... | 2026-10-15 |
| CVE-2026-108943 | medium | 5.3 | No | A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/... | 2026-10-15 |