Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85621 | medium | 6.5 | No | LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The webhook route... | 2026-09-24 |
| CVE-2026-6958 | high | 7.8 | No | Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine (wvsc.exe)... | 2026-09-24 |
| CVE-2026-82521 | medium | 5.3 | No | parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject con... | 2026-09-24 |
| CVE-2026-82520 | high | 7.5 | No | parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because... | 2026-09-24 |
| CVE-2026-85394 | critical | 9.1 | No | python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM... | 2026-09-24 |
| CVE-2026-85393 | high | 7.5 | No | node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification.... | 2026-09-24 |
| CVE-2026-85179 | high | 8.5 | No | Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including... | 2026-09-24 |
| CVE-2026-84809 | medium | 6.5 | No | Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__ directories an... | 2026-09-24 |
| CVE-2026-84700 | high | 8.6 | No | PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 (e.g. 11221 when the... | 2026-09-24 |
| CVE-2026-94057 | medium | 5.3 | No | Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data... | 2026-09-24 |
| CVE-2026-90927 | medium | 6.5 | No | filebrowser through 2.63.23 fails to limit WebSocket message size in the /api/command handler before checking permissions, allowing authenti... | 2026-09-24 |
| CVE-2026-91863 | high | 7.5 | No | A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread sta... | 2026-09-24 |
| CVE-2026-90554 | high | 7.5 | No | vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemot... | 2026-09-24 |
| CVE-2026-91994 | medium | 6.5 | No | Semaphore UI through 2.19.12 exempts GET and HEAD requests from project resource permission checks in GetMustCanMiddleware. Attackers with g... | 2026-09-24 |
| CVE-2026-82019 | medium | 4.2 | No | TripleLift's ad rendering script (video-bundle.js) contains a DOM-based cross-site scripting vulnerability that allows unauthenticated attac... | 2026-09-24 |
| CVE-2026-7208 | medium | 5.3 | No | Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackers... | 2026-09-24 |
| CVE-2026-90560 | high | 8.2 | No | zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset an... | 2026-09-24 |
| CVE-2026-85670 | medium | 6.5 | No | tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/model.rs). When load... | 2026-09-24 |
| CVE-2026-85396 | high | 7.5 | No | rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate extraction paths... | 2026-09-24 |
| CVE-2026-76642 | high | 7.8 | No | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged... | 2026-09-24 |