Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-109177 | medium | 4.3 | No | MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other adminis... | 2026-10-14 |
| CVE-2026-109172 | medium | 4.3 | No | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject r... | 2026-10-14 |
| CVE-2026-108894 | critical | 9.9 | No | A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute... | 2026-10-14 |
| CVE-2026-108889 | medium | 4.4 | No | A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C in the library... | 2026-10-14 |
| CVE-2026-108831 | medium | 6.3 | No | A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/d... | 2026-10-14 |
| CVE-2026-108827 | medium | 4.1 | No | A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/includes/functions/gene... | 2026-10-14 |
| CVE-2026-108822 | medium | 5.3 | No | A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modu... | 2026-10-14 |
| CVE-2026-108818 | high | 7.3 | No | A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.... | 2026-10-14 |
| CVE-2026-108814 | medium | 6.3 | No | A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a manipulation can lead... | 2026-10-14 |
| CVE-2026-108810 | medium | 5.3 | No | A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema... | 2026-10-14 |
| CVE-2026-108806 | high | 7.3 | No | A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issu... | 2026-10-14 |
| CVE-2026-108802 | low | 3.5 | No | A weakness has been identified in y_project RuoYi up to 4.8.3. This affects the function renderDrawer of the file /system/dict/data/add of t... | 2026-10-14 |
| CVE-2026-108788 | medium | 5.3 | No | A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component... | 2026-10-14 |
| CVE-2026-108784 | medium | 6.5 | No | A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/m... | 2026-10-14 |
| CVE-2026-108779 | medium | 6.3 | No | A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file s... | 2026-10-14 |
| CVE-2026-107433 | medium | 6.5 | No | Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access... | 2026-10-14 |
| CVE-2026-107426 | high | 7.3 | No | Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configure... | 2026-10-14 |
| CVE-2026-106599 | high | 8.8 | No | Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: f... | 2026-10-14 |
| CVE-2026-107754 | medium | 6.4 | No | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Sc... | 2026-10-14 |
| CVE-2026-104909 | high | 8.1 | No | The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '_type (e.g. f... | 2026-10-14 |