Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90826 | low | 2.8 | No | A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegraph/base_scenegraph.c... | 2026-09-16 |
| CVE-2026-90818 | medium | 4.3 | No | A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConf... | 2026-09-16 |
| CVE-2026-90812 | medium | 4.3 | No | A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the... | 2026-09-16 |
| CVE-2026-90807 | medium | 6.3 | No | A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forwardAttachedFiles of the file src/modules/ag... | 2026-09-16 |
| CVE-2026-54247 | medium | 4.3 | No | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.22, Handler in dataclients/kubernetes/admission/admission... | 2026-09-16 |
| CVE-2026-4130 | high | 7.1 | No | There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local... | 2026-09-16 |
| CVE-2026-4129 | high | 8.1 | No | There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access ho... | 2026-09-16 |
| CVE-2026-48737 | medium | 4.9 | No | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, is_global_address in src/pyload/core/utils/web... | 2026-09-16 |
| CVE-2026-20079 | critical | 10.0 | Listed | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attack... | 2026-09-16 |
| CVE-2026-84537 | medium | 6.6 | No | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An... | 2026-09-16 |
| CVE-2026-84520 | critical | 9.8 | No | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to... | 2026-09-16 |
| CVE-2026-84554 | medium | 5.9 | No | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tah... | 2026-09-16 |
| CVE-2026-86890 | medium | 4.6 | No | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with ph... | 2026-09-16 |
| CVE-2026-84598 | high | 7.5 | No | A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. A... | 2026-09-16 |
| CVE-2026-84576 | medium | 5.5 | No | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may... | 2026-09-16 |
| CVE-2026-73478 | medium | 5.3 | No | Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2... | 2026-09-16 |
| CVE-2026-88051 | high | 7.8 | No | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h... | 2026-09-16 |
| CVE-2026-88052 | high | 7.8 | No | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the dec... | 2026-09-16 |
| CVE-2026-92616 | medium | 6.8 | No | FileRise before version 3.28.0 contains a privilege escalation vulnerability that allows authenticated low-privilege attackers to gain unaut... | 2026-09-16 |
| CVE-2026-88976 | medium | 6.1 | No | Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, Pla... | 2026-09-16 |