Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91997 | medium | 5.3 | No | evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allo... | 2026-09-24 |
| CVE-2026-91925 | high | 8.8 | No | Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, al... | 2026-09-24 |
| CVE-2026-91922 | medium | 6.1 | No | Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint t... | 2026-09-24 |
| CVE-2026-91079 | high | 8.5 | No | Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist va... | 2026-09-24 |
| CVE-2026-90944 | high | 8.2 | No | Krayin CRM through 2.2.6 exposes the POST /admin/mail/inbound-parse endpoint without authentication, allowing unauthenticated attackers to i... | 2026-09-24 |
| CVE-2026-90943 | high | 8.7 | No | parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenti... | 2026-09-24 |
| CVE-2026-90772 | high | 7.6 | No | Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in... | 2026-09-24 |
| CVE-2026-90769 | high | 7.7 | No | Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform serve... | 2026-09-24 |
| CVE-2026-82535 | medium | 6.1 | No | Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject ma... | 2026-09-24 |
| CVE-2026-89259 | critical | 9.8 | No | Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS — included in the de... | 2026-09-24 |
| CVE-2026-89145 | medium | 4.2 | No | Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error page rendered by getVal... | 2026-09-24 |
| CVE-2026-86177 | high | 8.8 | No | Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subusers with only schedu... | 2026-09-24 |
| CVE-2026-86123 | high | 8.7 | No | SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL qu... | 2026-09-24 |
| CVE-2026-86121 | critical | 9.8 | No | Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfa... | 2026-09-24 |
| CVE-2026-86116 | medium | 6.5 | No | Metabase versions before 0.63.1 fail to enforce data analyst permission checks on glossary API endpoints, allowing any authenticated user to... | 2026-09-24 |
| CVE-2026-86095 | high | 7.8 | No | Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5 attribute names int... | 2026-09-24 |
| CVE-2026-85699 | high | 7.5 | No | jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re... | 2026-09-24 |
| CVE-2026-85697 | medium | 6.5 | No | Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. A... | 2026-09-24 |
| CVE-2026-85693 | medium | 6.5 | No | Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private fi... | 2026-09-24 |
| CVE-2026-85688 | critical | 9.8 | No | TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints... | 2026-09-24 |