Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105147 | high | 7.3 | No | A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipula... | 2026-10-05 |
| CVE-2026-105127 | medium | 5.3 | No | LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggerin... | 2026-10-05 |
| CVE-2026-105112 | medium | 5.3 | No | Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-admin users to d... | 2026-10-05 |
| CVE-2026-104478 | high | 7.1 | No | Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete a... | 2026-10-05 |
| CVE-2026-104419 | medium | 4.8 | No | Zebra (zebrad) 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points... | 2026-10-05 |
| CVE-2026-100641 | high | 8.0 | No | SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it into the card-manager list markup. Block co... | 2026-10-05 |
| CVE-2026-100637 | high | 7.6 | No | SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint that allows authenticated administrators t... | 2026-10-05 |
| CVE-2026-100633 | medium | 6.5 | No | SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard (uti... | 2026-10-05 |
| CVE-2026-100629 | medium | 5.5 | No | Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/role_bindings/:binding_id endpoint. The handl... | 2026-10-05 |
| CVE-2026-100624 | medium | 5.4 | No | Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy endpoint. When a nat... | 2026-10-05 |
| CVE-2026-100620 | low | 3.8 | No | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When o... | 2026-10-05 |
| CVE-2026-100616 | medium | 5.5 | No | capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, the row-level security UPDATE policy on the... | 2026-10-05 |
| CVE-2026-100608 | high | 8.3 | No | Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard en... | 2026-10-05 |
| CVE-2026-100604 | medium | 5.4 | No | ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub application/backend: an organization-owned skill... | 2026-10-05 |
| CVE-2026-100600 | medium | 5.3 | No | ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to a trusted caller identity, so all direct ano... | 2026-10-05 |
| CVE-2023-54402 | high | 7.5 | No | iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fe... | 2026-10-05 |
| CVE-2026-93546 | high | 8.8 | No | Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker... | 2026-10-05 |
| CVE-2026-105396 | medium | 5.4 | No | Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attackers to redirect HIT... | 2026-10-05 |
| CVE-2026-100727 | medium | 5.3 | No | An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public page... | 2026-10-05 |
| CVE-2026-105113 | medium | 6.5 | No | Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock leaks on a nil-map pan... | 2026-10-05 |