Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-76769 | high | 8.8 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privil... | 2026-10-13 |
| CVE-2026-76779 | critical | 9.8 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication... | 2026-10-13 |
| CVE-2026-78013 | medium | 6.3 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure De... | 2026-10-13 |
| CVE-2026-78017 | low | 3.8 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Condit... | 2026-10-13 |
| CVE-2026-78018 | high | 7.1 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure De... | 2026-10-13 |
| CVE-2026-78340 | medium | 6.7 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricte... | 2026-10-13 |
| CVE-2026-78339 | high | 7.1 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Res... | 2026-10-13 |
| CVE-2026-78027 | medium | 6.8 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.... | 2026-10-13 |
| CVE-2026-78024 | high | 8.7 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.... | 2026-10-13 |
| CVE-2026-78022 | high | 8.1 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerabili... | 2026-10-13 |
| CVE-2026-78019 | high | 8.8 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Contro... | 2026-10-13 |
| CVE-2026-89271 | medium | 5.3 | No | The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated uploa... | 2026-10-13 |
| CVE-2026-89269 | medium | 6.8 | No | The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization... | 2026-10-13 |
| CVE-2026-84167 | medium | 4.3 | No | The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, allowing any authent... | 2026-10-13 |
| CVE-2026-84166 | medium | 4.3 | No | The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order management, allowing a... | 2026-10-13 |
| CVE-2026-107791 | medium | 6.5 | No | The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of its bulk comment-deleti... | 2026-10-13 |
| CVE-2026-97183 | medium | 4.3 | No | The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allowing any authenticated... | 2026-10-13 |
| CVE-2026-96227 | high | 8.8 | No | The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browse... | 2026-10-13 |
| CVE-2026-94235 | medium | 4.3 | No | The MemberHero WordPress plugin through 6.9 does not perform any capability or nonce check on one of its AJAX actions, allowing any authenti... | 2026-10-13 |
| CVE-2026-93550 | medium | 4.3 | No | The Veeqo for WooCommerce WordPress plugin through 2.2.8 does not restrict who can trigger its remote bridge-installation process or validat... | 2026-10-13 |