Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81443 | medium | 6.4 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privile... | 2026-10-06 |
| CVE-2026-81442 | high | 8.1 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged... | 2026-10-06 |
| CVE-2026-80355 | medium | 5.4 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthentic... | 2026-10-06 |
| CVE-2026-103630 | critical | 9.6 | No | Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via... | 2026-10-06 |
| CVE-2026-81548 | high | 8.8 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutra... | 2026-10-06 |
| CVE-2026-81549 | high | 7.7 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper vali... | 2026-10-06 |
| CVE-2026-106039 | medium | 6.5 | No | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to create, s... | 2026-10-06 |
| CVE-2026-32576 | medium | 6.5 | No | Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Inc... | 2026-10-06 |
| CVE-2026-37719 | critical | 9.8 | No | An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component. | 2026-10-06 |
| CVE-2026-51878 | medium | 4.3 | No | deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.regenerate_last_turn. A r... | 2026-10-06 |
| CVE-2026-51873 | high | 8.8 | No | Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to write files outside t... | 2026-10-06 |
| CVE-2026-105793 | critical | 9.1 | No | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo... | 2026-10-06 |
| CVE-2026-105788 | high | 8.8 | No | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch... | 2026-10-06 |
| CVE-2026-105048 | medium | 4.0 | No | The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses). | 2026-10-06 |
| CVE-2026-81552 | high | 8.8 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutra... | 2026-10-06 |
| CVE-2026-82093 | high | 8.8 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserializat... | 2026-10-06 |
| CVE-2026-82094 | high | 7.1 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to imprope... | 2026-10-06 |
| CVE-2026-80379 | high | 8.8 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutra... | 2026-10-06 |
| CVE-2026-80412 | high | 8.8 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping o... | 2026-10-06 |
| CVE-2026-80425 | high | 8.8 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutra... | 2026-10-06 |