Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108628 | high | 8.1 | No | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionControll... | 2026-10-14 |
| CVE-2026-108623 | high | 7.1 | No | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authentic... | 2026-10-14 |
| CVE-2026-108618 | medium | 4.3 | No | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message temp... | 2026-10-14 |
| CVE-2026-108613 | medium | 5.4 | No | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticat... | 2026-10-14 |
| CVE-2026-108608 | medium | 4.3 | No | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI... | 2026-10-14 |
| CVE-2026-108573 | medium | 5.5 | No | A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer:... | 2026-10-14 |
| CVE-2026-108569 | medium | 6.3 | No | A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file fram... | 2026-10-14 |
| CVE-2026-108544 | medium | 6.3 | No | A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxview... | 2026-10-14 |
| CVE-2026-108540 | critical | 9.9 | No | A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File... | 2026-10-14 |
| CVE-2026-108522 | high | 8.3 | No | A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Lo... | 2026-10-14 |
| CVE-2026-108156 | high | 7.1 | No | LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts t... | 2026-10-14 |
| CVE-2026-108093 | medium | 5.5 | No | A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite... | 2026-10-14 |
| CVE-2026-107388 | medium | 5.5 | No | music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the ID3v2 parser trusts the syncsafe tag-size field a... | 2026-10-14 |
| CVE-2026-82918 | medium | 5.5 | No | XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence Corporation improper... | 2026-10-14 |
| CVE-2026-78021 | medium | 5.3 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive... | 2026-10-14 |
| CVE-2026-78016 | medium | 4.3 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input v... | 2026-10-14 |
| CVE-2026-75349 | high | 7.5 | No | EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing.... | 2026-10-14 |
| CVE-2026-108110 | medium | 6.8 | No | MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to acce... | 2026-10-14 |
| CVE-2026-108108 | high | 7.1 | No | PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chap_verify() ret... | 2026-10-14 |
| CVE-2026-108103 | medium | 5.3 | No | Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_dropped_dl_traffic_threshold() that allows remote u... | 2026-10-14 |