Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77528 | medium | 5.3 | No | Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to 26.7.1, WebSocket endpoints th... | 2026-09-24 |
| CVE-2026-76901 | medium | 5.8 | No | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.4, GET /pool/l... | 2026-09-24 |
| CVE-2026-76900 | medium | 6.8 | No | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. In version 1.7.3, ApprovalR... | 2026-09-24 |
| CVE-2026-61723 | medium | 6.8 | No | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl c... | 2026-09-24 |
| CVE-2026-61720 | medium | 6.2 | No | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modul... | 2026-09-24 |
| CVE-2026-58264 | critical | 9.8 | No | FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the FluidSynth command handler accepts... | 2026-09-24 |
| CVE-2026-52745 | medium | 5.3 | No | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.0, the POST /a... | 2026-09-24 |
| CVE-2026-91127 | high | 8.2 | No | File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @fi... | 2026-09-24 |
| CVE-2026-85058 | high | 7.5 | No | Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client-controlled Last Will message through... | 2026-09-24 |
| CVE-2026-84992 | medium | 6.1 | No | md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt() highlight callback... | 2026-09-24 |
| CVE-2026-77386 | medium | 6.5 | No | Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthenticated attacker could initiate the OIDC... | 2026-09-24 |
| CVE-2026-64847 | not reported | — | No | AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO... | 2026-09-24 |
| CVE-2026-63445 | not reported | — | No | Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file... | 2026-09-24 |
| CVE-2026-62278 | high | 8.1 | No | LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authenticated non-administ... | 2026-09-24 |
| CVE-2026-59163 | critical | 9.1 | No | Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_server.py parsed the... | 2026-09-24 |
| CVE-2026-33625 | high | 8.8 | No | LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection... | 2026-09-24 |
| CVE-2026-32641 | high | 7.5 | No | Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs use... | 2026-09-24 |
| CVE-2026-81505 | not reported | — | No | Convoy is a cloud native webhooks gateway. Prior to 26.6.8, Convoy's GET /api/v1/projects/{projectID}/sources/{sourceID} endpoint authorizes... | 2026-09-24 |
| CVE-2026-77339 | not reported | — | No | Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server... | 2026-09-24 |
| CVE-2026-63406 | medium | 5.9 | No | AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemetry subsystem in tele... | 2026-09-24 |