Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108890 | medium | 6.3 | No | A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager... | 2026-10-13 |
| CVE-2026-108834 | medium | 4.3 | No | A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ww_page.php of the c... | 2026-10-13 |
| CVE-2026-104192 | critical | 9.6 | No | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_... | 2026-10-13 |
| CVE-2026-100822 | medium | 5.4 | No | Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and... | 2026-10-13 |
| CVE-2026-100824 | high | 8.8 | No | Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Fir... | 2026-10-13 |
| CVE-2026-100825 | high | 8.8 | No | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.... | 2026-10-13 |
| CVE-2026-100826 | medium | 6.5 | No | Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird... | 2026-10-13 |
| CVE-2026-95112 | medium | 6.5 | No | When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" or "fixes" once per M... | 2026-10-13 |
| CVE-2026-96399 | high | 7.5 | No | A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gite... | 2026-10-13 |
| CVE-2026-96400 | medium | 4.3 | No | With `[migrations] ALLOWED_DOMAINS` set to a matching entry such as `*` or a hostname wildcard, Gitea's migration URL validation could permi... | 2026-10-13 |
| CVE-2026-96404 | high | 8.1 | No | When Gitea's web installer is reachable against a database that already contains users, such as after `INSTALL_LOCK` has been reset to `fals... | 2026-10-13 |
| CVE-2026-96580 | high | 7.5 | No | Gitea expanded a workflow's static `strategy.matrix` into its full Cartesian product without a size limit when creating a run, before the fo... | 2026-10-13 |
| CVE-2026-96589 | medium | 4.3 | No | When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access as a collaborator so... | 2026-10-13 |
| CVE-2026-104045 | medium | 4.7 | No | A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between... | 2026-10-13 |
| CVE-2026-104046 | medium | 6.2 | No | A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication reque... | 2026-10-13 |
| CVE-2026-100828 | critical | 9.6 | No | Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.... | 2026-10-13 |
| CVE-2026-100829 | critical | 9.6 | No | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and... | 2026-10-13 |
| CVE-2026-100830 | high | 8.1 | No | Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, a... | 2026-10-13 |
| CVE-2026-107819 | medium | 5.9 | No | MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the M... | 2026-10-13 |
| CVE-2026-100831 | high | 8.8 | No | Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunder... | 2026-10-13 |