Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101131 | low | 3.3 | No | A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2... | 2026-09-28 |
| CVE-2026-101105 | medium | 6.3 | No | A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file... | 2026-09-28 |
| CVE-2026-101101 | medium | 4.3 | No | A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/conve... | 2026-09-28 |
| CVE-2026-101100 | medium | 5.4 | No | A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the fil... | 2026-09-28 |
| CVE-2026-101098 | medium | 4.3 | No | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of... | 2026-09-28 |
| CVE-2026-101083 | medium | 5.3 | No | A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll.... | 2026-09-28 |
| CVE-2026-101081 | critical | 9.1 | No | A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_... | 2026-09-28 |
| CVE-2026-101080 | medium | 4.8 | No | A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skill_scan/tool... | 2026-09-28 |
| CVE-2026-101078 | medium | 6.3 | No | A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbo... | 2026-09-28 |
| CVE-2026-101077 | critical | 10.0 | No | A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipu... | 2026-09-28 |
| CVE-2026-101075 | critical | 10.0 | No | A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_t... | 2026-09-28 |
| CVE-2026-101074 | critical | 9.8 | No | A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the... | 2026-09-28 |
| CVE-2026-101090 | critical | 9.8 | No | Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard_host setting is emp... | 2026-09-28 |
| CVE-2026-101086 | medium | 6.5 | No | Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users wit... | 2026-09-28 |
| CVE-2026-101064 | high | 7.6 | No | Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to s... | 2026-09-28 |
| CVE-2026-101063 | medium | 5.3 | No | Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authentication is enabled.... | 2026-09-28 |
| CVE-2026-101049 | medium | 6.5 | No | Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have empty signing secrets. Remote una... | 2026-09-28 |
| CVE-2026-100853 | medium | 5.9 | No | In AzuraCast before 0.23.8, the public On-Demand download endpoint fails to verify playlist-level access controls, allowing unauthenticated... | 2026-09-28 |
| CVE-2026-100852 | high | 8.8 | No | AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquidsoap config generation for live recording that fails to quot... | 2026-09-28 |
| CVE-2026-100849 | high | 7.1 | No | AzuraCast is a self-hosted web radio management suite. In AzuraCast before 0.23.8, the station webhook URL validation in AbstractConnector::... | 2026-09-28 |