Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102244 | medium | 4.3 | No | A security flaw has been discovered in MODSetter SurfSense up to 0.0.36. Impacted is an unknown function of the file surfsense_backend/app/r... | 2026-09-29 |
| CVE-2026-102243 | high | 7.4 | No | A vulnerability was identified in MODSetter SurfSense up to 2.0.3. This issue affects some unknown processing of the file /api/search-source... | 2026-09-29 |
| CVE-2026-102240 | critical | 10.0 | No | A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/network_tools of the... | 2026-09-29 |
| CVE-2026-101860 | high | 8.8 | No | A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginInstaller::addSudoers of the fil... | 2026-09-29 |
| CVE-2026-101858 | medium | 4.7 | No | A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/N... | 2026-09-29 |
| CVE-2026-101354 | critical | 9.6 | No | A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAte... | 2026-09-29 |
| CVE-2026-101280 | high | 7.3 | No | A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_query_dmarc of the c... | 2026-09-29 |
| CVE-2026-101279 | medium | 6.5 | No | A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file lib... | 2026-09-29 |
| CVE-2026-101277 | medium | 6.5 | No | A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is the function dkim_process_set o... | 2026-09-29 |
| CVE-2026-101265 | low | 3.1 | No | A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page... | 2026-09-29 |
| CVE-2026-101262 | critical | 9.1 | No | A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/set_online_clie... | 2026-09-29 |
| CVE-2026-101205 | medium | 6.3 | No | A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This mani... | 2026-09-29 |
| CVE-2026-101202 | medium | 6.3 | No | A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. E... | 2026-09-29 |
| CVE-2026-59156 | medium | 6.5 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-59181 | medium | 6.1 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-59956 | medium | 6.1 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-93330 | medium | 4.3 | No | Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to byp... | 2026-09-29 |
| CVE-2026-100289 | medium | 5.0 | No | Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privile... | 2026-09-29 |
| CVE-2026-100287 | medium | 5.4 | No | Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user... | 2026-09-29 |
| CVE-2026-100286 | medium | 6.5 | No | Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrativ... | 2026-09-29 |