Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85578 | medium | 6.5 | No | SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files... | 2026-10-08 |
| CVE-2026-85210 | medium | 4.3 | No | Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with open_access, allowing any registered user to enumerate... | 2026-10-08 |
| CVE-2026-84199 | high | 7.7 | No | Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's Servic... | 2026-10-08 |
| CVE-2026-84192 | high | 7.1 | No | LibreNMS before 26.3.1 contains a stored cross-site scripting vulnerability in legacy PHP templates that output SNMP-sourced and syslog-sour... | 2026-10-08 |
| CVE-2026-84190 | high | 7.2 | No | LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutController where the snmpget configuration paramet... | 2026-10-08 |
| CVE-2026-84189 | high | 8.1 | No | LibreNMS through 26.4.0 renders JSON fields (name, ip, model, author, commit message) returned by the admin-configurable Oxidized integratio... | 2026-10-08 |
| CVE-2026-84188 | medium | 4.8 | No | LibreNMS versions <= 26.4.0 contain a stored cross-site scripting vulnerability in the graph_descr. configuration settings, which are echoed... | 2026-10-08 |
| CVE-2026-74881 | critical | 9.3 | No | openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to wildcard and allow_credentials enabled to true. Attackers can... | 2026-10-08 |
| CVE-2026-35002 | critical | 9.8 | No | Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to ex... | 2026-10-08 |
| CVE-2026-32064 | critical | 9.1 | No | OpenClaw versions prior to 2026.2.21 sandbox browser entrypoint launches x11vnc without authentication for noVNC observer sessions, allowing... | 2026-10-08 |
| CVE-2026-24425 | critical | 9.9 | No | Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerability when using a SourcePolicyInterface that allows attacker... | 2026-10-08 |
| CVE-2026-106326 | medium | 4.4 | No | Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions in... | 2026-10-08 |
| CVE-2026-106324 | medium | 6.1 | No | Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system a... | 2026-10-08 |
| CVE-2026-106198 | high | 8.2 | No | Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce... | 2026-10-08 |
| CVE-2026-106188 | high | 7.1 | No | Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictio... | 2026-10-08 |
| CVE-2026-104473 | medium | 6.1 | No | YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inject JavaScript throu... | 2026-10-08 |
| CVE-2026-101056 | medium | 5.3 | No | Cloudreve before 4.16.1 fails to revalidate share access when restoring cached navigator state from a context_hint UUID. Attackers who previ... | 2026-10-08 |
| CVE-2026-101048 | medium | 5.4 | No | Cloudreve before 4.17.0 registers the administrative node test endpoints (POST /api/v4/admin/node/test and POST /api/v4/admin/node/test/down... | 2026-10-08 |
| CVE-2026-100868 | medium | 6.3 | No | Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unau... | 2026-10-08 |
| CVE-2026-100857 | high | 8.0 | No | AzuraCast before 0.23.4 contains a code injection vulnerability in the ConfigWriter::cleanUpString() method that fails to sanitize Liquidsoa... | 2026-10-08 |