Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82153 | low | 2.2 | No | Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attack... | 2026-10-15 |
| CVE-2026-84313 | high | 8.8 | No | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, POST /api/otp_enroll and POST /api/finish_passkey_register are re... | 2026-10-15 |
| CVE-2026-8037 | critical | 9.8 | Listed | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbi... | 2026-10-15 |
| CVE-2026-69191 | medium | 5.4 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces d... | 2026-10-15 |
| CVE-2026-61844 | high | 7.1 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise flattens l... | 2026-10-15 |
| CVE-2026-55682 | high | 8.1 | No | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the auto-prepended web/html/seguranca/sessionStart.php reflects an attac... | 2026-10-15 |
| CVE-2026-110852 | not reported | — | No | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution m... | 2026-10-15 |
| CVE-2026-110847 | not reported | — | No | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in the Chat Trigger ho... | 2026-10-15 |
| CVE-2026-110842 | not reported | — | No | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpret... | 2026-10-15 |
| CVE-2026-110807 | medium | 4.3 | No | A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file py... | 2026-10-15 |
| CVE-2026-109377 | medium | 4.3 | No | ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view stock quantities via wh... | 2026-10-15 |
| CVE-2026-108931 | medium | 4.3 | No | A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file dhcp_dynamicip_show.cgi of the component D... | 2026-10-15 |
| CVE-2026-108927 | medium | 6.3 | No | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the fil... | 2026-10-15 |
| CVE-2026-108922 | medium | 6.3 | No | A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function ge... | 2026-10-15 |
| CVE-2026-108918 | critical | 10.0 | No | A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of... | 2026-10-15 |
| CVE-2026-108914 | critical | 9.9 | No | A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. T... | 2026-10-15 |
| CVE-2026-107503 | not reported | — | No | In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including... | 2026-10-15 |
| CVE-2026-104105 | medium | 6.4 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies t... | 2026-10-15 |
| CVE-2026-91811 | high | 7.8 | No | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indic... | 2026-10-15 |
| CVE-2026-102635 | medium | 5.3 | No | ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension h... | 2026-10-15 |