Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-95930 | medium | 6.3 | No | A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.... | 2026-09-23 |
| CVE-2026-95926 | high | 7.3 | No | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the f... | 2026-09-23 |
| CVE-2026-95925 | high | 7.3 | No | A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /... | 2026-09-23 |
| CVE-2026-95897 | medium | 5.5 | No | A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py o... | 2026-09-23 |
| CVE-2026-95833 | medium | 6.3 | No | A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/in... | 2026-09-23 |
| CVE-2026-95830 | medium | 6.3 | No | A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown... | 2026-09-23 |
| CVE-2026-95819 | high | 7.3 | No | A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this vulne... | 2026-09-23 |
| CVE-2026-88415 | high | 8.7 | No | MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS). The article content field `contentDetails` is excluded from the... | 2026-09-23 |
| CVE-2026-6831 | medium | 6.5 | No | The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9. This... | 2026-09-23 |
| CVE-2026-5924 | medium | 6.4 | No | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' at... | 2026-09-23 |
| CVE-2026-53682 | medium | 5.3 | No | An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured respo... | 2026-09-23 |
| CVE-2026-95928 | medium | 5.5 | No | A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file recomme... | 2026-09-23 |
| CVE-2026-95828 | medium | 4.3 | No | A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the file Front-end/server.p... | 2026-09-23 |
| CVE-2026-93952 | critical | 10.0 | Listed | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functio... | 2026-09-23 |
| CVE-2026-94127 | critical | 9.8 | Listed | When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code... | 2026-09-23 |
| CVE-2026-23933 | critical | 9.1 | No | In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only... | 2026-09-23 |
| CVE-2026-96559 | not reported | — | No | Rejected reason: This ID was for testing | 2026-09-23 |
| CVE-2025-69288 | critical | 9.1 | No | Titra is open source project time tracking software. Prior to version 0.99.49, Titra allows any authenticated Admin user to modify the timeE... | 2026-09-23 |
| CVE-2025-69286 | critical | 9.8 | No | RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation al... | 2026-09-23 |
| CVE-2025-34468 | critical | 9.8 | No | libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attack... | 2026-09-23 |