Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108737 | medium | 6.8 | No | Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session crede... | 2026-10-13 |
| CVE-2026-108701 | medium | 4.3 | No | 1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability in the ContractController sortModule handler for POST /cont... | 2026-10-13 |
| CVE-2026-108681 | medium | 4.3 | No | A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/web_channel.py... | 2026-10-13 |
| CVE-2026-108576 | critical | 10.0 | No | A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostic... | 2026-10-13 |
| CVE-2026-108572 | medium | 4.3 | No | A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controll... | 2026-10-13 |
| CVE-2026-108568 | medium | 4.3 | No | A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file syste... | 2026-10-13 |
| CVE-2026-108543 | medium | 6.3 | No | A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgen... | 2026-10-13 |
| CVE-2026-108539 | medium | 6.3 | No | A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the compon... | 2026-10-13 |
| CVE-2026-108521 | medium | 4.7 | No | A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file bac... | 2026-10-13 |
| CVE-2025-1675 | critical | 9.1 | No | The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buff... | 2026-10-13 |
| CVE-2026-106436 | medium | 6.5 | No | The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave t... | 2026-10-13 |
| CVE-2026-106432 | high | 8.2 | No | The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encod... | 2026-10-13 |
| CVE-2026-84290 | medium | 5.1 | No | IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel drive... | 2026-10-13 |
| CVE-2026-107391 | high | 7.5 | No | music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a developm... | 2026-10-13 |
| CVE-2026-107392 | high | 7.5 | No | music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calli... | 2026-10-13 |
| CVE-2026-106287 | medium | 4.3 | No | Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network t... | 2026-10-13 |
| CVE-2026-95630 | medium | 4.3 | No | Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged at... | 2026-10-13 |
| CVE-2026-106294 | critical | 9.1 | No | Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restric... | 2026-10-13 |
| CVE-2026-109828 | medium | 4.3 | No | A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the... | 2026-10-13 |
| CVE-2026-109606 | high | 7.3 | No | A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file ad... | 2026-10-13 |