Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91199 | medium | 5.0 | No | Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied U... | 2026-09-23 |
| CVE-2026-91080 | high | 7.5 | No | webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhau... | 2026-09-23 |
| CVE-2026-90946 | high | 7.5 | No | DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that a... | 2026-09-23 |
| CVE-2026-90945 | critical | 9.8 | No | Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment... | 2026-09-23 |
| CVE-2026-90942 | critical | 9.6 | No | Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoint... | 2026-09-23 |
| CVE-2026-55073 | medium | 6.2 | No | WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive url_fetcher an... | 2026-09-23 |
| CVE-2026-90940 | medium | 5.3 | No | novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows ano... | 2026-09-23 |
| CVE-2026-90938 | high | 8.6 | No | LangBot's plugin runtime (pip package langbot_plugin) through 0.4.17 starts a debug WebSocket server on 0.0.0.0:5401 (/plugin/ws) whose auth... | 2026-09-23 |
| CVE-2026-90933 | high | 7.1 | No | laradashboard through 1.2.2 contains a missing authorization vulnerability in the Local License API endpoints that allows any authenticated... | 2026-09-23 |
| CVE-2026-90919 | critical | 9.8 | No | LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endp... | 2026-09-23 |
| CVE-2026-90782 | medium | 5.3 | No | S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed al... | 2026-09-23 |
| CVE-2026-90780 | high | 7.5 | No | SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages... | 2026-09-23 |
| CVE-2026-90779 | high | 7.5 | No | SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with o... | 2026-09-23 |
| CVE-2026-90777 | high | 8.8 | No | ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution f... | 2026-09-23 |
| CVE-2026-90770 | high | 8.8 | No | Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that interpolates user-supplied monitor address... | 2026-09-23 |
| CVE-2026-90767 | medium | 6.5 | No | Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add() endpoint, allowing customers to inject arb... | 2026-09-23 |
| CVE-2026-90558 | critical | 9.8 | No | sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-b... | 2026-09-23 |
| CVE-2026-90556 | high | 7.8 | No | Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist length... | 2026-09-23 |
| CVE-2026-90467 | medium | 4.0 | No | aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into M... | 2026-09-23 |
| CVE-2026-49439 | medium | 4.3 | No | OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with... | 2026-09-23 |