Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-96328 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-... | 2026-10-09 |
| CVE-2026-97332 | medium | 5.3 | No | The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where th... | 2026-10-09 |
| CVE-2026-94059 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Ogency ogency allows Reflec... | 2026-10-09 |
| CVE-2026-95607 | high | 8.5 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQ... | 2026-10-09 |
| CVE-2026-95591 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engi... | 2026-10-09 |
| CVE-2026-94665 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing clas... | 2026-10-09 |
| CVE-2026-94632 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Boot... | 2026-10-09 |
| CVE-2026-94167 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder ku... | 2026-10-09 |
| CVE-2026-93947 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Traveler traveler allows Bl... | 2026-10-09 |
| CVE-2026-84271 | high | 7.8 | No | IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access cou... | 2026-10-09 |
| CVE-2026-87742 | high | 7.5 | No | A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by streaming mes... | 2026-10-09 |
| CVE-2026-81929 | high | 7.2 | No | The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parame... | 2026-10-09 |
| CVE-2026-39779 | medium | 4.3 | No | Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security... | 2026-10-09 |
| CVE-2026-19878 | medium | 6.5 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attac... | 2026-10-09 |
| CVE-2026-57967 | critical | 9.8 | No | An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing executi... | 2026-10-09 |
| CVE-2026-107736 | not reported | — | No | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-controlled PropertyT... | 2026-10-09 |
| CVE-2026-107735 | not reported | — | No | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, InitializePolicies() starts the sumatrapdfrestrict.ini path with gPol... | 2026-10-09 |
| CVE-2026-107734 | not reported | — | No | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the... | 2026-10-09 |
| CVE-2026-107731 | medium | 5.5 | No | SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-validation variants in src/LitDoc.cpp al... | 2026-10-09 |
| CVE-2026-107730 | medium | 5.5 | No | SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp computes the attacker-controlled hdrLen... | 2026-10-09 |