Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77606 | medium | 6.1 | No | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers... | 2026-09-24 |
| CVE-2026-61548 | high | 8.1 | No | Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSD_PARAM function in... | 2026-09-24 |
| CVE-2026-55556 | not reported | — | No | Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_auth_header function in... | 2026-09-24 |
| CVE-2026-81515 | high | 7.5 | No | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 unti... | 2026-09-24 |
| CVE-2026-85077 | high | 8.2 | No | Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sani... | 2026-09-24 |
| CVE-2026-76802 | medium | 4.7 | No | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply... | 2026-09-24 |
| CVE-2026-85272 | medium | 4.3 | No | Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/l... | 2026-09-24 |
| CVE-2026-54495 | medium | 4.3 | No | The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a contr... | 2026-09-24 |
| CVE-2026-52836 | not reported | — | No | OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior to 3.34.0, a networ... | 2026-09-24 |
| CVE-2026-62371 | high | 8.8 | No | KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.12.0 un... | 2026-09-24 |
| CVE-2026-86049 | high | 7.1 | No | Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyter_server/log.py c... | 2026-09-24 |
| CVE-2026-54354 | high | 8.2 | No | MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappo... | 2026-09-24 |
| CVE-2026-86040 | high | 7.5 | No | libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthenticated RPC frames... | 2026-09-24 |
| CVE-2026-86039 | high | 8.2 | No | libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/sr... | 2026-09-24 |
| CVE-2026-69200 | low | 3.7 | No | node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to node-opcua-client 2.145.0, the internal fieldsToJson method in p... | 2026-09-24 |
| CVE-2026-88756 | medium | 5.3 | No | Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public logi... | 2026-09-24 |
| CVE-2026-94588 | medium | 4.4 | No | In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality. This is caused by improper... | 2026-09-24 |
| CVE-2026-88412 | medium | 5.3 | No | An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause... | 2026-09-24 |
| CVE-2026-88407 | high | 7.5 | No | An out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to v4.20.4 allows attackers... | 2026-09-24 |
| CVE-2026-84451 | medium | 6.5 | No | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of unc_decoder::get_compr... | 2026-09-24 |