Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77169 | medium | 6.5 | No | A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only deleg... | 2026-09-18 |
| CVE-2026-77164 | medium | 6.2 | No | Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is established,... | 2026-09-18 |
| CVE-2026-6205 | high | 8.1 | No | An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-7280... | 2026-09-18 |
| CVE-2026-68493 | low | 3.1 | No | After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they ar... | 2026-09-18 |
| CVE-2026-67071 | medium | 6.5 | No | HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a depl... | 2026-09-18 |
| CVE-2026-54767 | critical | 9.1 | No | WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletar_socios.php exposes an unauthen... | 2026-09-18 |
| CVE-2026-4036 | medium | 6.5 | No | An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStation... | 2026-09-18 |
| CVE-2026-54612 | high | 8.8 | No | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. From 1.0.0 until 1.0.8.5, saveGlobal... | 2026-09-18 |
| CVE-2026-40532 | medium | 6.5 | No | A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-7280... | 2026-09-18 |
| CVE-2026-40531 | medium | 4.3 | No | An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7... | 2026-09-18 |
| CVE-2026-20336 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisc... | 2026-09-18 |
| CVE-2026-20335 | high | 8.1 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisc... | 2026-09-18 |
| CVE-2026-20334 | high | 8.4 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisc... | 2026-09-18 |
| CVE-2026-20333 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisc... | 2026-09-18 |
| CVE-2026-20332 | critical | 9.9 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisc... | 2026-09-18 |
| CVE-2026-20331 | critical | 9.6 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisc... | 2026-09-18 |
| CVE-2026-20330 | critical | 9.9 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisc... | 2026-09-18 |
| CVE-2026-20329 | critical | 9.9 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisc... | 2026-09-18 |
| CVE-2026-18911 | high | 7.5 | No | ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send req... | 2026-09-18 |
| CVE-2026-18405 | high | 7.2 | No | The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cr... | 2026-09-18 |