Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85676 | medium | 4.3 | No | Dub contains an open redirect vulnerability in the redir_url query parameter that is accepted on every short link without validation or doma... | 2026-09-23 |
| CVE-2026-85662 | medium | 5.3 | No | Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthenticated attackers to tri... | 2026-09-23 |
| CVE-2026-89146 | high | 7.5 | No | libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arith... | 2026-09-23 |
| CVE-2026-85651 | high | 8.5 | No | Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authenticated attackers to... | 2026-09-23 |
| CVE-2026-85650 | medium | 5.4 | No | Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs that are fetched withou... | 2026-09-23 |
| CVE-2026-85176 | high | 8.8 | No | DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbitrary files via file... | 2026-09-23 |
| CVE-2026-82522 | medium | 5.4 | No | libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary... | 2026-09-23 |
| CVE-2026-84811 | medium | 6.5 | No | agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scan... | 2026-09-23 |
| CVE-2026-84810 | medium | 6.5 | No | claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python... | 2026-09-23 |
| CVE-2026-84485 | high | 7.5 | No | APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated atta... | 2026-09-23 |
| CVE-2026-84484 | high | 7.5 | No | ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote atta... | 2026-09-23 |
| CVE-2026-84699 | critical | 9.1 | No | Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticat... | 2026-09-23 |
| CVE-2026-95868 | medium | 6.3 | No | A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by th... | 2026-09-23 |
| CVE-2026-93769 | not reported | — | No | HumHub 1.18.5 is affected by a stored cross-site scripting (XSS) vulnerability that allows any user holding the delegated, non-system-admini... | 2026-09-23 |
| CVE-2026-95820 | medium | 6.3 | No | A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is s... | 2026-09-23 |
| CVE-2026-95831 | high | 7.8 | No | Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The gen... | 2026-09-23 |
| CVE-2026-93533 | medium | 6.3 | No | A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::ch... | 2026-09-23 |
| CVE-2026-93504 | medium | 6.3 | No | A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/[...path]/+server.ts of the compo... | 2026-09-23 |
| CVE-2026-92881 | medium | 4.3 | No | A security vulnerability has been detected in vgmstream. The affected element is the function init_vgmstream_awb_memory of the file src/meta... | 2026-09-23 |
| CVE-2026-61834 | medium | 4.3 | No | scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and assign() uses prototyp... | 2026-09-23 |