Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-94097 | critical | 10.0 | No | A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of... | 2026-09-24 |
| CVE-2026-94092 | medium | 5.5 | No | A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing... | 2026-09-24 |
| CVE-2026-94050 | medium | 4.3 | No | A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand... | 2026-09-24 |
| CVE-2026-94045 | low | 3.5 | No | A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/Upl... | 2026-09-24 |
| CVE-2026-94040 | medium | 5.3 | No | A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderAction of the file app/(... | 2026-09-24 |
| CVE-2026-94035 | medium | 4.3 | No | A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommend... | 2026-09-24 |
| CVE-2026-94030 | low | 3.1 | No | A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is t... | 2026-09-24 |
| CVE-2026-88410 | high | 7.1 | No | The graph.UDF in FalkorDB (Redis module) v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the... | 2026-09-24 |
| CVE-2026-88405 | critical | 9.8 | No | A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of U... | 2026-09-24 |
| CVE-2026-79320 | medium | 6.1 | No | Stencil core 4.43.5 contains a DOM-based cross-site scripting (XSS) vulnerability in the component runtime. When a downstream application en... | 2026-09-24 |
| CVE-2026-67827 | critical | 9.8 | No | Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution (RCE)... | 2026-09-24 |
| CVE-2026-36469 | critical | 9.1 | No | CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php -- upload_from_inet (Media Manager's "Upload... | 2026-09-24 |
| CVE-2025-21335 | high | 7.8 | Listed | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | 2026-09-24 |
| CVE-2025-23006 | critical | 9.8 | Listed | Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and... | 2026-09-24 |
| CVE-2025-21391 | high | 7.1 | Listed | Windows Storage Elevation of Privilege Vulnerability | 2026-09-24 |
| CVE-2025-0108 | critical | 9.1 | Listed | An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management... | 2026-09-24 |
| CVE-2025-26633 | high | 7.0 | Listed | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. | 2026-09-24 |
| CVE-2025-24993 | high | 7.8 | Listed | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 2026-09-24 |
| CVE-2025-30066 | high | 8.6 | Listed | tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were af... | 2026-09-24 |
| CVE-2024-48248 | high | 8.6 | Listed | NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may l... | 2026-09-24 |