Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-107424 | critical | 9.8 | No | Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issu... | 2026-10-14 |
| CVE-2026-107431 | high | 7.5 | No | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Secu... | 2026-10-14 |
| CVE-2026-107428 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnke... | 2026-10-14 |
| CVE-2026-94578 | high | 8.8 | No | Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Account... | 2026-10-14 |
| CVE-2026-94575 | medium | 5.7 | No | A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to b... | 2026-10-14 |
| CVE-2026-18390 | high | 7.8 | No | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Dire... | 2026-10-14 |
| CVE-2026-12613 | high | 8.8 | No | Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on... | 2026-10-14 |
| CVE-2026-109958 | medium | 4.3 | No | EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows authenticated users to read restricted emailAddres... | 2026-10-14 |
| CVE-2026-109406 | medium | 5.4 | No | A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file... | 2026-10-14 |
| CVE-2026-109402 | medium | 6.3 | No | A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/... | 2026-10-14 |
| CVE-2026-109672 | medium | 6.5 | No | Frappe ERPNext before 15.118.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoints that fail to enfo... | 2026-10-14 |
| CVE-2026-109614 | medium | 6.5 | No | Frappe ERPNext before 16.34.0 contains a missing authorization vulnerability that allows authenticated users to read financial data beyond t... | 2026-10-14 |
| CVE-2026-109157 | critical | 9.9 | No | A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/... | 2026-10-14 |
| CVE-2026-109116 | high | 7.3 | No | A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is th... | 2026-10-14 |
| CVE-2026-109109 | critical | 10.0 | No | A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllS... | 2026-10-14 |
| CVE-2026-108975 | high | 7.3 | No | A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_f... | 2026-10-14 |
| CVE-2026-108971 | critical | 9.6 | No | A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component E... | 2026-10-14 |
| CVE-2026-108967 | high | 7.3 | No | A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/s... | 2026-10-14 |
| CVE-2026-108962 | medium | 6.3 | No | A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue... | 2026-10-14 |
| CVE-2026-108958 | medium | 6.3 | No | A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py... | 2026-10-14 |