Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85189 | not reported | — | No | Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0 - Modals treat... | 2026-09-16 |
| CVE-2026-85188 | not reported | — | No | Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pr... | 2026-09-16 |
| CVE-2026-88263 | high | 7.5 | No | XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration dat... | 2026-09-16 |
| CVE-2026-84408 | high | 8.8 | No | QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC whe... | 2026-09-16 |
| CVE-2026-81326 | medium | 5.5 | No | QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's clie... | 2026-09-16 |
| CVE-2026-80217 | high | 8.8 | No | Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode o... | 2026-09-16 |
| CVE-2026-77853 | high | 8.8 | No | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A us... | 2026-09-16 |
| CVE-2026-86701 | low | 2.5 | No | Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components. A malicious appli... | 2026-09-16 |
| CVE-2026-85125 | medium | 5.4 | No | The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. Th... | 2026-09-16 |
| CVE-2026-82796 | medium | 5.4 | No | SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS com... | 2026-09-16 |
| CVE-2026-82795 | medium | 5.4 | No | SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploit... | 2026-09-16 |
| CVE-2026-82794 | high | 8.8 | No | SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary O... | 2026-09-16 |
| CVE-2026-82793 | high | 7.2 | No | Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specia... | 2026-09-16 |
| CVE-2026-82792 | medium | 5.2 | No | Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is explo... | 2026-09-16 |
| CVE-2026-82791 | high | 8.8 | No | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wir... | 2026-09-16 |
| CVE-2026-82790 | medium | 5.4 | No | Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vul... | 2026-09-16 |
| CVE-2026-82789 | high | 8.8 | No | An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If expl... | 2026-09-16 |
| CVE-2026-82788 | medium | 6.1 | No | Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logge... | 2026-09-16 |
| CVE-2026-82787 | critical | 9.8 | No | Missing authentication for critical function vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an affected product ma... | 2026-09-16 |
| CVE-2026-82786 | medium | 6.3 | No | Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulnerability is exploited... | 2026-09-16 |