Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-51880 | critical | 9.8 | No | deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live tutorbot WebSocket interface, a remote caller can... | 2026-10-05 |
| CVE-2026-51875 | critical | 9.1 | No | In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files... | 2026-10-05 |
| CVE-2026-105130 | low | 3.7 | No | LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated at... | 2026-10-05 |
| CVE-2026-105125 | low | 3.7 | No | LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating... | 2026-10-05 |
| CVE-2026-104892 | not reported | — | No | Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with... | 2026-10-05 |
| CVE-2026-55007 | high | 8.1 | No | Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. | 2026-10-05 |
| CVE-2026-86853 | medium | 4.3 | No | A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make... | 2026-10-05 |
| CVE-2026-10518 | medium | 4.3 | No | GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that... | 2026-10-05 |
| CVE-2026-4523 | low | 3.7 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 t... | 2026-10-05 |
| CVE-2026-84739 | high | 8.7 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 t... | 2026-10-05 |
| CVE-2026-8937 | medium | 4.3 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 th... | 2026-10-05 |
| CVE-2026-100810 | critical | 9.8 | No | Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 2026-10-05 |
| CVE-2026-100811 | critical | 9.6 | No | Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157,... | 2026-10-05 |
| CVE-2026-100812 | medium | 6.5 | No | Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Fire... | 2026-10-05 |
| CVE-2026-100813 | high | 8.8 | No | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 2026-10-05 |
| CVE-2026-100814 | high | 8.8 | No | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T... | 2026-10-05 |
| CVE-2026-100815 | high | 8.8 | No | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird... | 2026-10-05 |
| CVE-2026-100816 | high | 8.1 | No | Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4... | 2026-10-05 |
| CVE-2026-100818 | critical | 9.6 | No | Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thund... | 2026-10-05 |
| CVE-2026-100823 | medium | 5.4 | No | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157. | 2026-10-05 |