Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-79536 | critical | 9.1 | No | bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allo... | 2026-09-30 |
| CVE-2026-79535 | medium | 6.3 | No | mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection. The update_config MCP tool (and the "voicemode config set" CLI) writes a... | 2026-09-30 |
| CVE-2026-86330 | high | 7.2 | No | An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This component is responsible... | 2026-09-30 |
| CVE-2026-79534 | medium | 5.9 | No | mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystems... | 2026-09-30 |
| CVE-2026-79417 | medium | 5.3 | No | Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass... | 2026-09-30 |
| CVE-2026-79403 | high | 8.4 | No | An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint | 2026-09-30 |
| CVE-2026-76737 | low | 3.0 | No | An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation cou... | 2026-09-30 |
| CVE-2026-76736 | low | 3.3 | No | A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow... | 2026-09-30 |
| CVE-2026-76735 | medium | 4.1 | No | A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploita... | 2026-09-30 |
| CVE-2026-76734 | medium | 4.8 | No | A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to c... | 2026-09-30 |
| CVE-2026-76733 | medium | 4.9 | No | A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with ad... | 2026-09-30 |
| CVE-2026-76731 | medium | 6.5 | No | An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to... | 2026-09-30 |
| CVE-2026-76730 | medium | 6.5 | No | An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adja... | 2026-09-30 |
| CVE-2026-75969 | not reported | — | No | Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules... | 2026-09-30 |
| CVE-2026-76721 | critical | 9.8 | No | Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attac... | 2026-09-30 |
| CVE-2026-18825 | not reported | — | No | An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a... | 2026-09-30 |
| CVE-2026-103445 | not reported | — | No | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Page_Forms... | 2026-09-30 |
| CVE-2026-103444 | not reported | — | No | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki WikiForum... | 2026-09-30 |
| CVE-2026-103443 | not reported | — | No | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Collection... | 2026-09-30 |
| CVE-2026-103440 | not reported | — | No | Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Infor... | 2026-09-30 |