Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86261 | high | 7.3 | No | A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown fun... | 2026-09-28 |
| CVE-2026-86260 | medium | 6.5 | No | A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the funct... | 2026-09-28 |
| CVE-2026-86244 | medium | 4.3 | No | A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta. Affected is the function register/login of the file appli... | 2026-09-28 |
| CVE-2026-86241 | medium | 4.3 | No | A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config... | 2026-09-28 |
| CVE-2026-86240 | medium | 4.7 | No | A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor... | 2026-09-28 |
| CVE-2026-86239 | medium | 5.3 | No | A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/... | 2026-09-28 |
| CVE-2026-84857 | medium | 5.3 | No | A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoin... | 2026-09-28 |
| CVE-2026-84856 | medium | 5.3 | No | A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file apps... | 2026-09-28 |
| CVE-2026-84852 | medium | 4.4 | No | A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew... | 2026-09-28 |
| CVE-2026-84452 | not reported | — | No | Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/... | 2026-09-28 |
| CVE-2026-97686 | medium | 5.5 | No | Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated... | 2026-09-28 |
| CVE-2026-84375 | high | 7.5 | No | js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and li... | 2026-09-28 |
| CVE-2026-100658 | not reported | — | No | Rejected reason: This CVE ID has been rejected as a duplicate. | 2026-09-28 |
| CVE-2026-100657 | not reported | — | No | Rejected reason: This CVE ID has been rejected as a duplicate. | 2026-09-28 |
| CVE-2026-100656 | not reported | — | No | Rejected reason: This CVE ID has been rejected as a duplicate. | 2026-09-28 |
| CVE-2026-100655 | not reported | — | No | Rejected reason: This CVE ID has been rejected as a duplicate. | 2026-09-28 |
| CVE-2026-56739 | not reported | — | No | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fetches administrator-controlled outbound... | 2026-09-28 |
| CVE-2026-65980 | not reported | — | No | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.... | 2026-09-28 |
| CVE-2026-77516 | medium | 5.4 | No | MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.9.2, a lowest-role workspace member denied access to a too... | 2026-09-28 |
| CVE-2026-49449 | low | 2.5 | No | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. From 1.4.0 until 3.7.2, packages/r... | 2026-09-28 |