Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101039 | critical | 10.0 | No | A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component dev... | 2026-09-28 |
| CVE-2026-101038 | critical | 9.9 | No | A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the compon... | 2026-09-28 |
| CVE-2026-101036 | medium | 5.3 | No | A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file /src/m... | 2026-09-28 |
| CVE-2026-101035 | medium | 5.3 | No | A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp... | 2026-09-28 |
| CVE-2026-101013 | high | 7.3 | No | A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affect... | 2026-09-28 |
| CVE-2026-101011 | medium | 4.7 | No | A security flaw has been discovered in aaPanel BaoTa up to 11.8.0. This affects the function get_domain_status of the file /www/server/panel... | 2026-09-28 |
| CVE-2026-101010 | medium | 4.7 | No | A vulnerability was identified in aaPanel BaoTa up to 11.8.0. The impacted element is the function getData of the file /www/server/panel/cla... | 2026-09-28 |
| CVE-2026-101008 | critical | 9.1 | No | A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files... | 2026-09-28 |
| CVE-2026-101007 | high | 8.4 | No | A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the... | 2026-09-28 |
| CVE-2026-101005 | high | 7.3 | No | A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/Resi... | 2026-09-28 |
| CVE-2026-101004 | medium | 5.3 | No | A security vulnerability has been detected in notionnext-org NotionNext up to 4.10.10. Affected by this issue is the function cleanCache of... | 2026-09-28 |
| CVE-2026-101002 | critical | 9.9 | No | A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tool... | 2026-09-28 |
| CVE-2026-100909 | high | 7.3 | No | A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file m... | 2026-09-28 |
| CVE-2026-100908 | high | 7.5 | No | A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulati... | 2026-09-28 |
| CVE-2026-100906 | medium | 5.3 | No | A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the componen... | 2026-09-28 |
| CVE-2026-100904 | low | 3.5 | No | A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e066... | 2026-09-28 |
| CVE-2026-100901 | high | 7.3 | No | A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file pu... | 2026-09-28 |
| CVE-2026-100899 | medium | 6.3 | No | A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. This impacts the function whereRaw of the file... | 2026-09-28 |
| CVE-2026-100898 | medium | 6.3 | No | A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. This affects the function whereRaw of th... | 2026-09-28 |
| CVE-2026-100896 | critical | 9.9 | No | A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSit... | 2026-09-28 |