Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-73497 | medium | 6.5 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). From 0.17.0 until 0.22.0, validate_url_... | 2026-09-30 |
| CVE-2026-73496 | high | 7.7 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the confluence_upload_... | 2026-09-30 |
| CVE-2026-55244 | medium | 5.0 | No | ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROM_PY in asteval/astutils.py exposes BaseException, SystemEx... | 2026-09-30 |
| CVE-2026-55209 | critical | 9.8 | No | resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9, resdata insufficiently valida... | 2026-09-30 |
| CVE-2026-55093 | medium | 6.1 | No | Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16, 0.22.2, and 0.23.1, tract-nnef uses un... | 2026-09-30 |
| CVE-2026-54632 | high | 7.5 | No | SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMe... | 2026-09-30 |
| CVE-2026-54629 | high | 7.5 | No | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtual table modules suc... | 2026-09-30 |
| CVE-2026-54628 | high | 8.6 | No | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes URL-capable SQLite virtual table modules suc... | 2026-09-30 |
| CVE-2026-54447 | high | 8.4 | No | garminconnect is a Python 3 API wrapper for Garmin Connect that retrieves statistics and manages activities. Prior to 0.3.5, garminconnect/c... | 2026-09-30 |
| CVE-2026-54334 | critical | 9.8 | No | UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen... | 2026-09-30 |
| CVE-2026-54333 | critical | 9.8 | No | UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTabl... | 2026-09-30 |
| CVE-2026-50006 | critical | 9.1 | No | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards unauthenticated SQL from its MySQL-compatib... | 2026-09-30 |
| CVE-2026-73494 | high | 7.4 | No | blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and from 1.0.0-M1 until 1.0.0-M42... | 2026-09-30 |
| CVE-2026-57581 | medium | 5.3 | No | DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, applications with configur... | 2026-09-30 |
| CVE-2026-55091 | high | 7.5 | No | flat-to-nested converts a hierarchy from a flat representation to a nested representation. Prior to 1.1.2, FlatToNested.prototype.convert in... | 2026-09-30 |
| CVE-2026-54567 | high | 7.5 | No | Flask-Reuploaded provides file uploads for Flask. From 1.5.0 until 1.6.0, UploadSet.save(storage, name=...) in src/flask_uploads/flask_uploa... | 2026-09-30 |
| CVE-2026-54181 | medium | 5.4 | No | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build c... | 2026-09-30 |
| CVE-2026-54180 | high | 7.6 | No | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build c... | 2026-09-30 |
| CVE-2026-54178 | high | 8.1 | No | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build c... | 2026-09-30 |
| CVE-2026-54177 | medium | 6.6 | No | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build c... | 2026-09-30 |