Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-20120 | medium | 5.8 | No | A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Applian... | 2026-09-18 |
| CVE-2026-20071 | low | 3.8 | No | A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker... | 2026-09-18 |
| CVE-2026-90884 | medium | 5.4 | No | The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all versions up to, and i... | 2026-09-18 |
| CVE-2026-83561 | high | 7.2 | No | The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Elem... | 2026-09-18 |
| CVE-2026-90981 | medium | 6.1 | No | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nn' parame... | 2026-09-18 |
| CVE-2026-17607 | medium | 6.5 | No | The WP Inventory Manager plugin for WordPress is vulnerable to SQL Injection via the 'where' shortcode attribute of the [wpinventory] shortc... | 2026-09-18 |
| CVE-2026-14472 | medium | 6.4 | No | The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Content in all version... | 2026-09-18 |
| CVE-2026-92714 | medium | 6.5 | No | The Download Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.3.68 via the... | 2026-09-18 |
| CVE-2026-89330 | medium | 6.1 | No | The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnera... | 2026-09-18 |
| CVE-2026-75016 | medium | 6.4 | No | The Magazine Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the News Ticker block's clientId attribute in vers... | 2026-09-18 |
| CVE-2026-92991 | medium | 5.4 | No | The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to in... | 2026-09-18 |
| CVE-2026-93313 | medium | 6.3 | No | A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file pop... | 2026-09-18 |
| CVE-2026-93308 | medium | 4.3 | No | A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of the component VES Co... | 2026-09-18 |
| CVE-2026-54671 | high | 8.8 | No | WeGIA is a web manager for charitable institutions. Prior to 3.8.5, WeGIA maps InternoControle to an empty resource array in web/controle/co... | 2026-09-18 |
| CVE-2026-47691 | critical | 10.0 | No | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final,... | 2026-09-18 |
| CVE-2026-45674 | critical | 10.0 | No | Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final,... | 2026-09-18 |
| CVE-2026-42581 | critical | 9.8 | No | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a co... | 2026-09-18 |
| CVE-2026-42579 | critical | 9.1 | No | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not en... | 2026-09-18 |
| CVE-2026-27446 | critical | 9.8 | No | Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote a... | 2026-09-18 |
| CVE-2026-20280 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a... | 2026-09-18 |