Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-54501 | not reported | — | No | Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or used through Webrecorder's hoste... | 2026-09-24 |
| CVE-2026-54339 | high | 7.7 | No | Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-suppli... | 2026-09-24 |
| CVE-2026-54237 | not reported | — | No | Wavelog is web-based amateur radio logging software. From 1.8 until 2.4.2, Wavelog exposes /install/ajax.php and /install/includes/interface... | 2026-09-24 |
| CVE-2026-45140 | critical | 9.8 | No | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute a... | 2026-09-24 |
| CVE-2026-54752 | critical | 9.6 | No | NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness... | 2026-09-24 |
| CVE-2026-54716 | high | 7.5 | No | Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. In 3.7.0 and earlier, a POST request t... | 2026-09-24 |
| CVE-2026-54692 | high | 7.8 | No | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sail_... | 2026-09-24 |
| CVE-2026-54626 | critical | 9.8 | No | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier... | 2026-09-24 |
| CVE-2026-50285 | high | 7.5 | No | Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryStringV2 in pkg/hpke/url.go performs zstd decompression... | 2026-09-24 |
| CVE-2026-45726 | high | 7.6 | No | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos clust... | 2026-09-24 |
| CVE-2026-45720 | high | 7.0 | No | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.getSession in intern... | 2026-09-24 |
| CVE-2026-55061 | not reported | — | No | uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNI... | 2026-09-24 |
| CVE-2026-54617 | critical | 9.8 | No | GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw... | 2026-09-24 |
| CVE-2026-54571 | not reported | — | No | ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3.11.1, the multipart... | 2026-09-24 |
| CVE-2026-52852 | medium | 6.5 | No | Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated user with permission to manage groups and request reports c... | 2026-09-24 |
| CVE-2026-54676 | medium | 6.5 | No | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, users with personal API tokens can retrieve replies from questi... | 2026-09-24 |
| CVE-2026-54551 | medium | 4.3 | No | WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.3.0, the authenticat... | 2026-09-24 |
| CVE-2026-61588 | medium | 6.5 | No | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when... | 2026-09-24 |
| CVE-2026-86071 | low | 3.7 | No | Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFold... | 2026-09-24 |
| CVE-2026-63325 | high | 7.8 | No | Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @red... | 2026-09-24 |