Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-47506 | medium | 5.5 | No | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occu... | 2026-09-30 |
| CVE-2026-47492 | medium | 5.5 | No | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper acce... | 2026-09-30 |
| CVE-2026-47489 | high | 7.8 | No | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be pre... | 2026-09-30 |
| CVE-2026-103232 | high | 7.3 | No | A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects t... | 2026-09-30 |
| CVE-2026-103237 | not reported | — | No | MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints (attribute... | 2026-09-30 |
| CVE-2026-102908 | high | 7.3 | No | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the fi... | 2026-09-30 |
| CVE-2026-103088 | high | 7.5 | No | Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-6349... | 2026-09-30 |
| CVE-2026-102847 | medium | 4.3 | No | A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function... | 2026-09-30 |
| CVE-2026-102844 | low | 2.7 | No | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects... | 2026-09-30 |
| CVE-2026-101065 | critical | 9.8 | No | Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented i... | 2026-09-30 |
| CVE-2026-101045 | high | 8.0 | No | Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-0... | 2026-09-30 |
| CVE-2026-100717 | critical | 9.9 | No | froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return and line feed charac... | 2026-09-30 |
| CVE-2026-100697 | high | 8.6 | No | Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin (plugins/drivers/clickhouse.php, rewritten in 6.0.0) is loaded, is v... | 2026-09-30 |
| CVE-2026-100693 | high | 8.4 | No | Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the security.http.urls IP-literal deny rule that all... | 2026-09-30 |
| CVE-2026-100689 | medium | 5.9 | No | GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules. While a prior f... | 2026-09-30 |
| CVE-2026-100677 | medium | 5.3 | No | stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error resp... | 2026-09-30 |
| CVE-2026-100627 | high | 8.1 | No | Capgo (Cap-go/capgo.app) server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. The... | 2026-09-30 |
| CVE-2026-100625 | high | 7.1 | No | Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/build/upload.ts) that authorizes a caller agai... | 2026-09-30 |
| CVE-2026-100623 | high | 8.8 | No | Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security p... | 2026-09-30 |
| CVE-2026-100621 | medium | 4.3 | No | Capgo (capgo.app) contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the... | 2026-09-30 |