Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91200 | high | 8.8 | No | DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a mali... | 2026-09-23 |
| CVE-2026-91146 | medium | 6.1 | No | Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federated post content and profile summaries, allowing remote actor... | 2026-09-23 |
| CVE-2026-91143 | high | 7.2 | No | goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass c... | 2026-09-23 |
| CVE-2026-82028 | high | 8.8 | No | Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows aut... | 2026-09-23 |
| CVE-2026-91081 | medium | 5.8 | No | Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make o... | 2026-09-23 |
| CVE-2026-90941 | medium | 4.3 | No | novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated ba... | 2026-09-23 |
| CVE-2026-90939 | medium | 6.5 | No | novel-plus through 5.3.3 contains an information disclosure vulnerability in the /sys/user/list endpoint that lacks proper permission annota... | 2026-09-23 |
| CVE-2026-90937 | critical | 9.9 | No | froxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing authenticated customers to inject arb... | 2026-09-23 |
| CVE-2026-90934 | medium | 4.3 | No | EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authentic... | 2026-09-23 |
| CVE-2026-90778 | high | 7.5 | No | SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of... | 2026-09-23 |
| CVE-2026-90774 | high | 7.5 | No | rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypa... | 2026-09-23 |
| CVE-2026-90773 | low | 3.2 | No | procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attack... | 2026-09-23 |
| CVE-2026-90768 | high | 8.1 | No | CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analys... | 2026-09-23 |
| CVE-2026-90562 | high | 8.1 | No | LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated res... | 2026-09-23 |
| CVE-2026-90557 | medium | 6.1 | No | Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files wit... | 2026-09-23 |
| CVE-2026-90474 | medium | 6.8 | No | MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authenticat... | 2026-09-23 |
| CVE-2026-90473 | medium | 5.3 | No | msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with... | 2026-09-23 |
| CVE-2026-90472 | medium | 5.3 | No | msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays an... | 2026-09-23 |
| CVE-2026-89268 | medium | 5.4 | No | QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping them in the list hel... | 2026-09-23 |
| CVE-2026-89267 | medium | 4.3 | No | starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an empty list, allowing au... | 2026-09-23 |