Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86516 | medium | 4.7 | No | A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file de... | 2026-09-23 |
| CVE-2026-13745 | not reported | — | No | A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to achieve arbitrary code execution by tricking a victim into sta... | 2026-09-23 |
| CVE-2000-0944 | critical | 9.8 | No | CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, w... | 2026-09-23 |
| CVE-2026-73176 | not reported | — | No | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera... | 2026-09-23 |
| CVE-2026-84835 | medium | 5.3 | No | Missing Authorization vulnerability in DimaFreund Rentsyst rentsyst allows Exploiting Incorrectly Configured Access Control Security Levels.... | 2026-09-23 |
| CVE-2026-6285 | high | 7.5 | No | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Passwor... | 2026-09-23 |
| CVE-2026-84217 | medium | 5.4 | No | Missing Authorization vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Cons... | 2026-09-23 |
| CVE-2026-12683 | medium | 5.4 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc.... | 2026-09-23 |
| CVE-2026-12682 | medium | 5.4 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc.... | 2026-09-23 |
| CVE-2026-8849 | not reported | — | No | Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professiona... | 2026-09-23 |
| CVE-2026-86805 | medium | 6.3 | No | A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44... | 2026-09-23 |
| CVE-2026-84395 | high | 7.1 | No | Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation potentially resulti... | 2026-09-23 |
| CVE-2026-81999 | high | 8.7 | No | Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalati... | 2026-09-23 |
| CVE-2026-7866 | not reported | — | No | Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext P... | 2026-09-23 |
| CVE-2026-74849 | critical | 9.8 | No | Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA clie... | 2026-09-23 |
| CVE-2026-17262 | medium | 5.4 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication comm... | 2026-09-23 |
| CVE-2026-93676 | low | 3.2 | No | xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sa... | 2026-09-22 |
| CVE-2026-92526 | medium | 6.3 | No | A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Exe... | 2026-09-22 |
| CVE-2026-20282 | medium | 4.9 | No | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an a... | 2026-09-22 |
| CVE-2026-20235 | medium | 4.9 | No | A vulnerability in the API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view sensitive informati... | 2026-09-22 |