Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-63405 | medium | 5.9 | No | AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the Pusher-compatible REST API... | 2026-09-24 |
| CVE-2026-62943 | not reported | — | No | btrbk is a tool for creating snapshots and remote backups of Btrfs subvolumes. From 0.29.0 until 0.32.7, btrbk's ssh_filter_btrbk.sh constru... | 2026-09-24 |
| CVE-2026-61795 | medium | 6.8 | No | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnUpdate in internal/we... | 2026-09-24 |
| CVE-2026-61794 | medium | 6.8 | No | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update validation in internal/web... | 2026-09-24 |
| CVE-2026-61672 | high | 7.1 | No | Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbidden_lis... | 2026-09-24 |
| CVE-2026-58197 | high | 8.8 | No | ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers. Prior to ToolHive CLI 0.30.1 and... | 2026-09-24 |
| CVE-2026-61682 | critical | 9.9 | No | kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.31.4 and 0.32.2,... | 2026-09-24 |
| CVE-2026-54148 | high | 8.1 | No | http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-... | 2026-09-24 |
| CVE-2026-54147 | medium | 6.5 | No | http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-... | 2026-09-24 |
| CVE-2026-54645 | medium | 4.8 | No | CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/products.index.inc.php reads the description, description_short, a... | 2026-09-24 |
| CVE-2026-54634 | high | 7.3 | No | Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld send_raw command on... | 2026-09-24 |
| CVE-2026-54520 | high | 8.1 | No | AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, the execut... | 2026-09-24 |
| CVE-2026-54519 | high | 8.8 | No | AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/sr... | 2026-09-24 |
| CVE-2026-50158 | high | 7.7 | No | yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-con... | 2026-09-24 |
| CVE-2026-77615 | high | 8.7 | No | Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 (as used in Opencast prior to 19.7... | 2026-09-24 |
| CVE-2026-68537 | high | 7.5 | No | `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19... | 2026-09-24 |
| CVE-2026-68523 | high | 7.5 | No | `fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19... | 2026-09-24 |
| CVE-2026-54916 | high | 8.8 | No | NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py... | 2026-09-24 |
| CVE-2026-54597 | high | 8.3 | No | ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authent... | 2026-09-24 |
| CVE-2026-54565 | medium | 4.7 | No | rhwp is an HWP viewer and editor implemented in Rust and WebAssembly. Prior to rhwp 0.7.15 and rhwp Chrome and Firefox extension 0.2.4, the... | 2026-09-24 |