Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108942 | low | 3.5 | No | A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function... | 2026-10-13 |
| CVE-2026-108938 | medium | 5.3 | No | A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This... | 2026-10-13 |
| CVE-2026-108934 | low | 2.4 | No | A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform... | 2026-10-13 |
| CVE-2026-108903 | medium | 5.3 | No | pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form... | 2026-10-13 |
| CVE-2026-108775 | medium | 6.3 | No | A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of th... | 2026-10-13 |
| CVE-2026-108770 | medium | 5.3 | No | A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Plat... | 2026-10-13 |
| CVE-2026-108851 | low | 3.3 | No | phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP clients to read res... | 2026-10-13 |
| CVE-2026-108720 | medium | 4.3 | No | phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnet... | 2026-10-13 |
| CVE-2026-108683 | medium | 4.3 | No | A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Me... | 2026-10-13 |
| CVE-2026-108578 | medium | 5.3 | No | A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded... | 2026-10-13 |
| CVE-2024-58391 | medium | 4.3 | No | Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not... | 2026-10-13 |
| CVE-2023-54409 | medium | 4.8 | No | Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text function weakly sanitizes... | 2026-10-13 |
| CVE-2026-87679 | high | 7.2 | No | When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings in... | 2026-10-13 |
| CVE-2026-87680 | high | 8.8 | No | A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated u... | 2026-10-13 |
| CVE-2026-107295 | high | 7.6 | No | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, th... | 2026-10-13 |
| CVE-2026-87681 | medium | 6.3 | No | An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before... | 2026-10-13 |
| CVE-2026-103526 | low | 3.7 | No | In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses for invalid usernames and incorr... | 2026-10-13 |
| CVE-2026-103522 | high | 7.2 | No | In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME... | 2026-10-13 |
| CVE-2026-103521 | high | 7.2 | No | In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does no... | 2026-10-13 |
| CVE-2026-107294 | medium | 6.5 | No | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, we... | 2026-10-13 |