Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77385 | medium | 4.3 | No | Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, a registered user with the core.play permission cou... | 2026-09-23 |
| CVE-2026-69186 | medium | 5.3 | No | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT f... | 2026-09-23 |
| CVE-2026-63458 | not reported | — | No | Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with view... | 2026-09-23 |
| CVE-2026-77607 | medium | 6.1 | No | Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to vers... | 2026-09-23 |
| CVE-2026-77239 | high | 8.1 | No | WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate accoun... | 2026-09-23 |
| CVE-2026-54734 | critical | 10.0 | No | Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into... | 2026-09-23 |
| CVE-2026-54644 | medium | 6.1 | No | CubeCart is an ecommerce software solution. Prior to 6.7.5, the _errorMessage method in classes/gui.class.php uses strip_tags to permit anch... | 2026-09-23 |
| CVE-2026-54343 | not reported | — | No | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, a remote att... | 2026-09-23 |
| CVE-2026-54907 | medium | 5.3 | No | Caddy Proxy Manager is a web interface for managing Caddy Server reverse proxies and certificates. Prior to 1.5.1, Caddy Proxy Manager enabl... | 2026-09-23 |
| CVE-2026-54604 | not reported | — | No | OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF ti... | 2026-09-23 |
| CVE-2026-54521 | medium | 6.1 | No | FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2319, the ActivityAMP AMP message renderer in... | 2026-09-23 |
| CVE-2026-50275 | high | 7.5 | No | The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2, ddtrace_deserialize_bag... | 2026-09-23 |
| CVE-2026-48977 | not reported | — | No | OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/opens... | 2026-09-23 |
| CVE-2026-54627 | critical | 9.8 | No | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier... | 2026-09-23 |
| CVE-2026-54594 | not reported | — | No | OmniBlocks is a monorepo for the OmniBlocks project. Prior to the June 6, 2026 workflow remediation, .github/workflows/disc.yml runs for the... | 2026-09-23 |
| CVE-2026-45723 | low | 2.7 | No | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in intern... | 2026-09-23 |
| CVE-2026-85999 | medium | 5.3 | No | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in src/soupsieve/css_parser.py t... | 2026-09-23 |
| CVE-2026-75523 | medium | 5.9 | No | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0,... | 2026-09-23 |
| CVE-2026-61700 | low | 3.7 | No | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5... | 2026-09-23 |
| CVE-2026-64684 | medium | 6.8 | No | RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.1.0, the rmcp crate's StreamableHttpClientTransport in crates/rmcp/s... | 2026-09-23 |