Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91144 | high | 7.5 | No | ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holdin... | 2026-09-24 |
| CVE-2026-89266 | high | 8.2 | No | stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated fro... | 2026-09-24 |
| CVE-2026-86124 | critical | 9.8 | No | AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attack... | 2026-09-24 |
| CVE-2026-86119 | high | 8.6 | No | Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asse... | 2026-09-24 |
| CVE-2026-85178 | high | 7.7 | No | Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the reque... | 2026-09-24 |
| CVE-2026-88384 | medium | 5.5 | No | OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-typ... | 2026-09-24 |
| CVE-2026-90481 | not reported | — | No | In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate p... | 2026-09-24 |
| CVE-2026-79680 | not reported | — | No | Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modi... | 2026-09-24 |
| CVE-2026-11744 | not reported | — | No | An input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sani... | 2026-09-24 |
| CVE-2026-79310 | high | 8.5 | No | webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into executing attacker-control... | 2026-09-24 |
| CVE-2026-78253 | not reported | — | No | Uncontrolled recursion in QXmlStreamReader::readElementText() in Qt Group Qt allows attackers to cause a denial of service (application cras... | 2026-09-24 |
| CVE-2026-79616 | not reported | — | No | Out-of-bounds read while parsing untrusted SVG path strings in Qt Quick's Context2D.path / PathSvg.path. | 2026-09-24 |
| CVE-2026-95814 | high | 8.1 | No | Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked an... | 2026-09-24 |
| CVE-2026-88341 | medium | 5.5 | No | A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious... | 2026-09-24 |
| CVE-2026-92776 | high | 8.1 | No | Wiki.js through 2.5.314 fails to require path separators when matching START and END page rules, allowing attackers to access pages sharing... | 2026-09-24 |
| CVE-2026-92775 | medium | 6.5 | No | Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image Prefetch renderer that fetches arbitrary URLs with... | 2026-09-24 |
| CVE-2026-91771 | high | 8.8 | No | Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path trav... | 2026-09-24 |
| CVE-2026-90775 | medium | 6.5 | No | PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an ar... | 2026-09-24 |
| CVE-2026-90561 | high | 8.7 | No | Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG... | 2026-09-24 |
| CVE-2026-96747 | medium | 5.0 | No | The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a... | 2026-09-24 |