Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-109525 | high | 7.3 | No | A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects... | 2026-10-13 |
| CVE-2026-109521 | high | 7.3 | No | A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects a... | 2026-10-13 |
| CVE-2026-109409 | medium | 5.3 | No | A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child_process.exec of the file src/routes/s... | 2026-10-13 |
| CVE-2026-104935 | high | 8.6 | Listed | Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. Thi... | 2026-10-13 |
| CVE-2026-109781 | medium | 6.5 | No | Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Th... | 2026-10-13 |
| CVE-2026-109779 | medium | 4.2 | No | Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-13 |
| CVE-2026-109777 | medium | 4.3 | No | Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158,... | 2026-10-13 |
| CVE-2026-109775 | medium | 6.5 | No | Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird... | 2026-10-13 |
| CVE-2026-109773 | medium | 6.5 | No | Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-13 |
| CVE-2026-109771 | medium | 4.3 | No | Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-13 |
| CVE-2026-109769 | medium | 4.3 | No | Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-13 |
| CVE-2026-109768 | medium | 6.5 | No | Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-13 |
| CVE-2026-109767 | medium | 4.3 | No | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thu... | 2026-10-13 |
| CVE-2026-109765 | medium | 4.2 | No | Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird... | 2026-10-13 |
| CVE-2026-109761 | medium | 5.4 | No | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-13 |
| CVE-2026-109752 | medium | 5.4 | No | Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbi... | 2026-10-13 |
| CVE-2026-109751 | medium | 4.3 | No | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thu... | 2026-10-13 |
| CVE-2026-109749 | medium | 5.4 | No | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-13 |
| CVE-2026-109748 | medium | 5.4 | No | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-13 |
| CVE-2026-109742 | medium | 4.3 | No | Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thu... | 2026-10-13 |