Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-93317 | not reported | — | No | An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed dige... | 2026-10-06 |
| CVE-2026-93316 | not reported | — | No | If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciousl... | 2026-10-06 |
| CVE-2026-86671 | not reported | — | No | In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled... | 2026-10-06 |
| CVE-2026-103512 | not reported | — | No | Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a... | 2026-10-06 |
| CVE-2026-103511 | not reported | — | No | Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-use... | 2026-10-06 |
| CVE-2026-103510 | not reported | — | No | P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenti... | 2026-10-06 |
| CVE-2026-103507 | not reported | — | No | Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding t... | 2026-10-06 |
| CVE-2026-100103 | not reported | — | No | Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unau... | 2026-10-06 |
| CVE-2026-100102 | not reported | — | No | Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to thi... | 2026-10-06 |
| CVE-2026-75937 | not reported | — | No | A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating... | 2026-10-06 |
| CVE-2026-104873 | not reported | — | No | LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python application... | 2026-10-06 |
| CVE-2026-97308 | medium | 4.8 | No | Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions. | 2026-10-06 |
| CVE-2026-105809 | medium | 4.3 | No | A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the fi... | 2026-10-06 |
| CVE-2026-105807 | high | 7.3 | No | A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php.... | 2026-10-06 |
| CVE-2026-105776 | high | 7.3 | No | A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a... | 2026-10-06 |
| CVE-2026-105708 | medium | 4.3 | No | A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/sv... | 2026-10-06 |
| CVE-2026-105706 | medium | 4.3 | No | A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation c... | 2026-10-06 |
| CVE-2026-105704 | high | 7.3 | No | A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guar... | 2026-10-06 |
| CVE-2026-105572 | medium | 4.3 | No | A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the co... | 2026-10-06 |
| CVE-2026-105484 | critical | 10.0 | No | A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of... | 2026-10-06 |