Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-63131 | not reported | — | No | OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could evaluate a broader w... | 2026-09-29 |
| CVE-2026-55776 | medium | 6.5 | No | OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to tra... | 2026-09-29 |
| CVE-2026-55770 | medium | 6.8 | No | OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-... | 2026-09-29 |
| CVE-2026-88056 | critical | 9.1 | No | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to... | 2026-09-29 |
| CVE-2026-88057 | medium | 6.1 | No | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to... | 2026-09-29 |
| CVE-2026-88058 | medium | 6.1 | No | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to... | 2026-09-29 |
| CVE-2026-84206 | medium | 4.3 | No | Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allowing users without d... | 2026-09-29 |
| CVE-2026-77265 | high | 7.5 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira o... | 2026-09-29 |
| CVE-2026-77267 | medium | 6.5 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-U... | 2026-09-29 |
| CVE-2026-77249 | medium | 5.3 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, JiraUserMixin._lookup_... | 2026-09-29 |
| CVE-2026-77257 | medium | 6.5 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and... | 2026-09-29 |
| CVE-2026-77262 | high | 8.6 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_atta... | 2026-09-29 |
| CVE-2026-77268 | medium | 5.5 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth fallback tok... | 2026-09-29 |
| CVE-2026-50291 | medium | 5.5 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to v... | 2026-09-29 |
| CVE-2026-102491 | high | 7.3 | No | A vulnerability was identified in mahonelau kykms up to 8f130c2d85842d5b44caae78cc46d65e505949f7. The impacted element is the function Query... | 2026-09-29 |
| CVE-2026-102292 | medium | 4.3 | No | A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some... | 2026-09-29 |
| CVE-2026-102290 | low | 3.5 | No | A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image U... | 2026-09-29 |
| CVE-2026-102263 | medium | 4.7 | No | A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown f... | 2026-09-29 |
| CVE-2026-102248 | high | 7.3 | No | A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Log... | 2026-09-29 |
| CVE-2026-102247 | medium | 6.8 | No | A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6.5.20260602. This affects an unknown function of the file application/database.p... | 2026-09-29 |