Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84283 | not reported | — | No | Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local ap... | 2026-09-25 |
| CVE-2026-84403 | medium | 6.2 | No | The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low En... | 2026-09-25 |
| CVE-2026-82716 | medium | 4.6 | No | The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generate... | 2026-09-25 |
| CVE-2026-82708 | medium | 6.5 | No | The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's W... | 2026-09-25 |
| CVE-2026-82585 | medium | 6.5 | No | The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of in... | 2026-09-25 |
| CVE-2026-81630 | high | 8.1 | No | The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmwar... | 2026-09-25 |
| CVE-2026-79959 | medium | 6.8 | No | The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtai... | 2026-09-25 |
| CVE-2026-75558 | medium | 5.3 | No | The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicate... | 2026-09-25 |
| CVE-2026-77967 | high | 8.1 | No | The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association wit... | 2026-09-25 |
| CVE-2026-51997 | high | 8.8 | No | An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions | 2026-09-25 |
| CVE-2026-61714 | high | 7.8 | No | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above... | 2026-09-25 |
| CVE-2026-44642 | high | 8.1 | No | Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, check_upgrade_access_rights() in admin/include... | 2026-09-25 |
| CVE-2026-42324 | high | 7.2 | No | Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/element_set_ranks.php stores administrat... | 2026-09-25 |
| CVE-2026-36471 | medium | 5.8 | No | Deserialization of Untrusted Data of the __post_data parameter in cn_parse_url() in CuteNews v.2.1.2 allows a remote attacker to inject arbi... | 2026-09-25 |
| CVE-2026-100190 | not reported | — | No | The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site script injection (XSS). User-supplied data... | 2026-09-25 |
| CVE-2026-34689 | high | 8.6 | No | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead... | 2026-09-25 |
| CVE-2026-48361 | medium | 6.1 | No | Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scrip... | 2026-09-25 |
| CVE-2026-24239 | high | 7.8 | No | NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution.... | 2026-09-25 |
| CVE-2026-24267 | high | 7.8 | No | NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an atta... | 2026-09-25 |
| CVE-2026-65111 | high | 7.8 | No | NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A s... | 2026-09-25 |