Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81878 | medium | 5.5 | No | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parse... | 2026-09-25 |
| CVE-2026-81879 | medium | 6.1 | No | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PN_XNUM handling was vulnerable... | 2026-09-25 |
| CVE-2026-81881 | medium | 4.4 | No | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser... | 2026-09-25 |
| CVE-2026-97648 | medium | 4.3 | No | A vulnerability was detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown... | 2026-09-25 |
| CVE-2026-97646 | high | 7.3 | No | A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unkno... | 2026-09-25 |
| CVE-2026-97366 | medium | 6.3 | No | A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the... | 2026-09-25 |
| CVE-2026-93030 | medium | 6.5 | No | FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw. | 2026-09-25 |
| CVE-2026-92288 | critical | 9.1 | No | Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspectio... | 2026-09-25 |
| CVE-2026-88388 | high | 7.5 | No | Espruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-... | 2026-09-25 |
| CVE-2026-88370 | medium | 5.3 | No | libconfini 1.16.4 contains a heap out-of-bounds write condition involving the bundled load_ini_buffer.h utility and strip_ini_cache(). The b... | 2026-09-25 |
| CVE-2026-79319 | medium | 5.3 | No | Stencil core 4.43.5 is vulnerable to Incorrect Access Control. | 2026-09-25 |
| CVE-2026-100174 | not reported | — | No | The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the abi... | 2026-09-25 |
| CVE-2026-100172 | not reported | — | No | The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that render... | 2026-09-25 |
| CVE-2026-69389 | high | 7.8 | No | Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. | 2026-09-25 |
| CVE-2026-69391 | high | 7.8 | No | Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally. | 2026-09-25 |
| CVE-2026-69392 | high | 7.8 | No | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | 2026-09-25 |
| CVE-2026-69394 | high | 7.0 | No | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 2026-09-25 |
| CVE-2026-69396 | high | 7.1 | No | Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. | 2026-09-25 |
| CVE-2026-97649 | medium | 4.7 | No | A flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability... | 2026-09-25 |
| CVE-2026-97325 | medium | 4.3 | No | A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability is the function vali... | 2026-09-25 |