Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-95372 | high | 8.3 | No | Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to p... | 2026-10-02 |
| CVE-2026-95373 | high | 8.8 | No | Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitr... | 2026-10-02 |
| CVE-2026-94405 | medium | 5.3 | No | Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data. This i... | 2026-10-02 |
| CVE-2026-86035 | high | 8.5 | No | Weblate is a web-based continuous localization platform used to manage software translations. Weblate 4.11.1 through 2026.7.1 contains an ar... | 2026-10-02 |
| CVE-2026-76875 | medium | 5.3 | No | PyPy before versions 3.11.16 and 3.12.14 contains a use-after-free vulnerability in the pyexpat module's ExternalEntityParserCreate function... | 2026-10-02 |
| CVE-2026-74222 | high | 8.2 | No | U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When... | 2026-10-02 |
| CVE-2026-71973 | medium | 5.2 | No | U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when allocating the directory t... | 2026-10-02 |
| CVE-2026-53988 | critical | 10.0 | No | Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attac... | 2026-10-02 |
| CVE-2026-51936 | not reported | — | No | Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function can be used to copy the contents of one atta... | 2026-10-02 |
| CVE-2026-51872 | critical | 9.8 | No | Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py. | 2026-10-02 |
| CVE-2026-51867 | critical | 9.8 | No | agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accep... | 2026-10-02 |
| CVE-2026-51861 | critical | 9.8 | No | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py. | 2026-10-02 |
| CVE-2026-51857 | critical | 9.8 | No | In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter w... | 2026-10-02 |
| CVE-2026-51570 | high | 8.1 | No | modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file. | 2026-10-02 |
| CVE-2026-103055 | high | 7.5 | No | AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_R... | 2026-10-02 |
| CVE-2026-103042 | high | 7.5 | No | LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_trans_mode nccl, allowi... | 2026-10-02 |
| CVE-2026-102937 | not reported | — | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prompt text unchang... | 2026-10-02 |
| CVE-2026-102913 | high | 7.3 | No | A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file... | 2026-10-02 |
| CVE-2026-102910 | high | 7.3 | No | A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of... | 2026-10-02 |
| CVE-2026-102906 | medium | 6.3 | No | A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function... | 2026-10-02 |