Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100895 | medium | 5.3 | No | A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the l... | 2026-09-28 |
| CVE-2026-100893 | high | 7.3 | No | A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability affects the function open_graph::fetch of the fil... | 2026-09-28 |
| CVE-2026-100892 | medium | 5.3 | No | A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.... | 2026-09-28 |
| CVE-2026-100889 | high | 7.3 | No | A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. Affected is the function dkim_qp_decode of the file util.c of... | 2026-09-28 |
| CVE-2026-100887 | medium | 6.3 | No | A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95.... | 2026-09-28 |
| CVE-2026-100884 | medium | 4.3 | No | A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file package... | 2026-09-28 |
| CVE-2026-100883 | medium | 6.3 | No | A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/C... | 2026-09-28 |
| CVE-2026-100881 | low | 2.6 | No | A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file ap... | 2026-09-28 |
| CVE-2026-100880 | low | 3.5 | No | A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/mai... | 2026-09-28 |
| CVE-2026-100878 | medium | 6.3 | No | A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file ed... | 2026-09-28 |
| CVE-2026-100877 | medium | 4.3 | No | A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this v... | 2026-09-28 |
| CVE-2026-100875 | high | 7.3 | No | A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an un... | 2026-09-28 |
| CVE-2026-100874 | high | 7.3 | No | A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown fun... | 2026-09-28 |
| CVE-2026-100746 | high | 7.3 | No | A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/... | 2026-09-28 |
| CVE-2026-82901 | critical | 9.8 | No | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in... | 2026-09-28 |
| CVE-2026-85984 | critical | 9.8 | No | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mo_wp_login... | 2026-09-28 |
| CVE-2026-77203 | high | 8.8 | No | The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including,... | 2026-09-28 |
| CVE-2026-18143 | critical | 9.8 | No | The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2... | 2026-09-28 |
| CVE-2026-15273 | medium | 6.4 | No | The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI in all version 4.0.0 due to insufficient... | 2026-09-28 |
| CVE-2026-97895 | medium | 6.3 | No | A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file packages/Webkul/Admin/src/Http/Co... | 2026-09-28 |