Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-54915 | medium | 5.4 | No | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the unauthenticated /auth/redirect endpoint... | 2026-09-24 |
| CVE-2026-55625 | medium | 4.9 | No | GoCD is a continuous deliver server. From 16.1.0 until 26.1.0, the internal material connection test APIs at /go/api/admin/internal/material... | 2026-09-24 |
| CVE-2026-52741 | not reported | — | No | GoCD is a continuous deliver server. From 18.3.0 until 26.1.0, GoCD can generate unescaped tracking-tool links from commit comments when a p... | 2026-09-24 |
| CVE-2026-50349 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock... | 2026-09-24 |
| CVE-2026-81855 | critical | 9.1 | No | A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard. | 2026-09-24 |
| CVE-2026-78225 | critical | 9.0 | No | A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard. | 2026-09-24 |
| CVE-2026-93291 | critical | 9.4 | No | Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to e... | 2026-09-24 |
| CVE-2026-93290 | medium | 5.5 | No | Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapp... | 2026-09-24 |
| CVE-2026-84399 | high | 8.8 | No | The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does... | 2026-09-24 |
| CVE-2026-82566 | high | 8.8 | No | The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the... | 2026-09-24 |
| CVE-2026-88419 | high | 8.8 | No | An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of Wuzh... | 2026-09-24 |
| CVE-2026-75517 | medium | 6.5 | No | Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including rem... | 2026-09-24 |
| CVE-2026-75510 | not reported | — | No | Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu's @novu/js In-App Inbox and the @novu/react... | 2026-09-24 |
| CVE-2026-61851 | not reported | — | No | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.... | 2026-09-24 |
| CVE-2026-61743 | medium | 6.3 | No | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.... | 2026-09-24 |
| CVE-2026-61652 | not reported | — | No | Zapros, a Python HTTP client, prior to version 0.14.0 is vulnerable to denial of service via memory exhaustion. The issue affects all caller... | 2026-09-24 |
| CVE-2026-61647 | not reported | — | No | NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault direc... | 2026-09-24 |
| CVE-2026-58270 | medium | 6.5 | No | Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, the sync diff endpo... | 2026-09-24 |
| CVE-2026-62247 | medium | 6.5 | No | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to 2.111.2, Realtime authorization does not corre... | 2026-09-24 |
| CVE-2026-55897 | high | 8.8 | No | luci-app-advanced-reboot is a LuCI (web interface) application for OpenWrt that provides a way to reboot your router into an alternative fir... | 2026-09-24 |