Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-62120 | critical | 9.8 | No | Unauthenticated PHP Object Injection in Law Office <= 3.20 versions. | 2026-10-13 |
| CVE-2026-62118 | high | 7.3 | No | Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. | 2026-10-13 |
| CVE-2026-62117 | high | 8.5 | No | Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. | 2026-10-13 |
| CVE-2026-62116 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. | 2026-10-13 |
| CVE-2026-62115 | high | 8.1 | No | Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions. | 2026-10-13 |
| CVE-2026-62100 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions. | 2026-10-13 |
| CVE-2026-62099 | high | 8.1 | No | Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions. | 2026-10-13 |
| CVE-2026-62098 | medium | 6.5 | No | Unauthenticated Content Injection in Boutique <= 2.3.3 versions. | 2026-10-13 |
| CVE-2026-62096 | high | 8.1 | No | Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions. | 2026-10-13 |
| CVE-2026-62095 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions. | 2026-10-13 |
| CVE-2026-62094 | high | 8.1 | No | Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions. | 2026-10-13 |
| CVE-2026-62093 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions. | 2026-10-13 |
| CVE-2026-62092 | high | 8.1 | No | Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions. | 2026-10-13 |
| CVE-2026-62091 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions. | 2026-10-13 |
| CVE-2026-62090 | critical | 9.8 | No | Unauthenticated PHP Object Injection in WineShop <= 3.20 versions. | 2026-10-13 |
| CVE-2026-62087 | critical | 9.8 | No | Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions. | 2026-10-13 |
| CVE-2026-62086 | critical | 9.8 | No | Unauthenticated PHP Object Injection in Juno <= 2.25 versions. | 2026-10-13 |
| CVE-2026-62082 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions. | 2026-10-13 |
| CVE-2026-62077 | critical | 9.8 | No | Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions. | 2026-10-13 |
| CVE-2026-62076 | critical | 9.8 | No | Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions. | 2026-10-13 |