Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91986 | medium | 5.4 | No | gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/... | 2026-09-23 |
| CVE-2026-86185 | high | 8.0 | No | Bilibili Desktop through 1.18.0 disables TLS certificate verification process-wide and executes unsigned remote JavaScript configuration wit... | 2026-09-23 |
| CVE-2026-86178 | medium | 5.4 | No | Pixelfed through 0.12.9 fails to validate follower status in StoryComposeController react and comment endpoints, allowing authenticated user... | 2026-09-23 |
| CVE-2026-86173 | high | 7.5 | No | MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers... | 2026-09-23 |
| CVE-2026-86120 | medium | 4.3 | No | APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to enforce node-level acc... | 2026-09-23 |
| CVE-2026-9317 | high | 8.1 | No | Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticated attackers to execu... | 2026-09-23 |
| CVE-2026-85700 | medium | 6.5 | No | Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read ad... | 2026-09-23 |
| CVE-2026-85698 | medium | 5.5 | No | Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-c... | 2026-09-23 |
| CVE-2026-85666 | high | 7.5 | No | OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerability in the OpenAI-c... | 2026-09-23 |
| CVE-2026-85665 | medium | 6.5 | No | Bruno versions through 4.1.0 fail to validate file paths in request body declarations, allowing attackers to read arbitrary local files by u... | 2026-09-23 |
| CVE-2026-85661 | critical | 9.8 | No | excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attackers to read and write... | 2026-09-23 |
| CVE-2026-85626 | high | 7.5 | No | git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools... | 2026-09-23 |
| CVE-2026-85606 | high | 7.5 | No | firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unconstrained fileP... | 2026-09-23 |
| CVE-2026-85605 | medium | 5.3 | No | Slink before 1.12.3 fails to properly authorize access to image comment endpoints, allowing unauthenticated attackers to read comment thread... | 2026-09-23 |
| CVE-2026-82527 | high | 7.5 | No | R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predicates into the chunks sear... | 2026-09-23 |
| CVE-2026-85395 | high | 7.1 | No | UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass... | 2026-09-23 |
| CVE-2026-85181 | critical | 9.8 | No | CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid... | 2026-09-23 |
| CVE-2026-85177 | medium | 5.4 | No | CRMEB through 6.0.0 fails to validate message ownership in the edit_message handler of MessageSystemController.php, allowing authenticated u... | 2026-09-23 |
| CVE-2026-92973 | medium | 6.1 | No | ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scripting vulnerability in OSC 8 hyperlink handling that fails to validate or... | 2026-09-23 |
| CVE-2026-91998 | critical | 9.9 | No | Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's c... | 2026-09-23 |