Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-59681 | critical | 9.8 | No | An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySe... | 2026-10-12 |
| CVE-2025-8679 | critical | 9.8 | No | In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure. Under certain Extr... | 2026-10-12 |
| CVE-2026-97302 | medium | 5.3 | No | Unauthenticated Sensitive Data Exposure in MPG <= 4.2.3 versions. | 2026-10-12 |
| CVE-2026-95594 | high | 8.1 | No | Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege... | 2026-10-12 |
| CVE-2026-104084 | high | 8.8 | No | SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuan... | 2026-10-12 |
| CVE-2026-96515 | not reported | — | No | This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnosti... | 2026-10-12 |
| CVE-2026-107352 | high | 7.7 | No | Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited que... | 2026-10-11 |
| CVE-2025-58668 | critical | 9.8 | No | Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This i... | 2026-10-11 |
| CVE-2025-11005 | critical | 9.8 | No | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Comman... | 2026-10-11 |
| CVE-2025-40836 | critical | 9.8 | No | Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute command... | 2026-10-11 |
| CVE-2025-27261 | critical | 9.8 | No | Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modificatio... | 2026-10-11 |
| CVE-2025-4993 | critical | 9.1 | No | Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Con... | 2026-10-11 |
| CVE-2025-1255 | critical | 9.1 | No | Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Con... | 2026-10-11 |
| CVE-2025-10857 | critical | 9.8 | No | A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Affected by this issue is some unknown functionality of the f... | 2026-10-11 |
| CVE-2025-10851 | critical | 9.8 | No | A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=log... | 2026-10-11 |
| CVE-2025-10843 | critical | 9.8 | No | A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the... | 2026-10-11 |
| CVE-2025-10842 | critical | 9.8 | No | A vulnerability was detected in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/wew.php.... | 2026-10-11 |
| CVE-2025-10841 | critical | 9.8 | No | A security vulnerability has been detected in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /adminis... | 2026-10-11 |
| CVE-2025-10836 | critical | 9.8 | No | A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/pr... | 2026-10-11 |
| CVE-2025-10834 | critical | 9.8 | No | A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/log... | 2026-10-11 |