Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-68932 | critical | 9.8 | No | FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mt... | 2026-10-13 |
| CVE-2026-66588 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive. | 2026-10-13 |
| CVE-2026-14780 | not reported | — | No | A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restricti... | 2026-10-13 |
| CVE-2026-87739 | not reported | — | No | An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submi... | 2026-10-13 |
| CVE-2026-82077 | not reported | — | No | An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG an... | 2026-10-13 |
| CVE-2026-108111 | medium | 4.3 | No | ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' p... | 2026-10-13 |
| CVE-2026-86405 | critical | 9.8 | No | Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Mo... | 2026-10-12 |
| CVE-2026-85531 | critical | 9.8 | No | Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Modu... | 2026-10-12 |
| CVE-2026-84275 | high | 7.5 | No | IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could ex... | 2026-10-12 |
| CVE-2026-84276 | high | 7.5 | No | IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attac... | 2026-10-12 |
| CVE-2026-78399 | medium | 6.5 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cau... | 2026-10-12 |
| CVE-2026-78388 | high | 8.8 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forg... | 2026-10-12 |
| CVE-2026-39460 | high | 8.1 | No | Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrato... | 2026-10-12 |
| CVE-2026-32645 | medium | 6.0 | No | Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts. | 2026-10-12 |
| CVE-2026-19493 | high | 7.5 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform... | 2026-10-12 |
| CVE-2026-16830 | medium | 5.4 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attac... | 2026-10-12 |
| CVE-2026-12091 | medium | 5.3 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a... | 2026-10-12 |
| CVE-2026-11939 | medium | 5.3 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery. | 2026-10-12 |
| CVE-2026-11936 | medium | 5.4 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain co... | 2026-10-12 |
| CVE-2025-61781 | critical | 9.1 | No | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.1, the GraphQL mut... | 2026-10-12 |