Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-67639 | high | 8.8 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 2026-09-15 |
| CVE-2026-90852 | high | 7.3 | No | A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the fil... | 2026-09-15 |
| CVE-2026-90847 | critical | 9.1 | No | A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the compone... | 2026-09-15 |
| CVE-2026-90842 | low | 3.7 | No | A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the... | 2026-09-15 |
| CVE-2026-90611 | low | 3.3 | No | A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt_parse_element of the file scene_manager/loader_xmt.c of... | 2026-09-15 |
| CVE-2026-90606 | critical | 9.9 | No | A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file... | 2026-09-15 |
| CVE-2026-90601 | high | 7.3 | No | A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the c... | 2026-09-15 |
| CVE-2026-90578 | medium | 5.3 | No | A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_list_count of the file utils/list.c of the component... | 2026-09-15 |
| CVE-2026-85657 | medium | 5.4 | No | The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored C... | 2026-09-15 |
| CVE-2026-85205 | medium | 6.3 | No | A vulnerability was determined in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function addwishlist of the file... | 2026-09-15 |
| CVE-2026-83978 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-15 |
| CVE-2026-66790 | not reported | — | No | Rejected reason: This CVE ID was assigned in error as a duplicate of CVE-2026-70496, which describes the same vulnerability. Please use CVE-... | 2026-09-15 |
| CVE-2026-66789 | not reported | — | No | Rejected reason: This CVE ID was assigned in error as a duplicate of CVE-2026-70495, which describes the same vulnerability. Please use CVE-... | 2026-09-15 |
| CVE-2026-52098 | critical | 9.8 | No | An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/ endpoint | 2026-09-15 |
| CVE-2026-90534 | medium | 6.5 | No | Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name... | 2026-09-15 |
| CVE-2026-90535 | high | 7.5 | No | Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/abort endpoint that a... | 2026-09-15 |
| CVE-2026-67638 | high | 8.8 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 2026-09-15 |
| CVE-2026-67393 | medium | 6.5 | No | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. | 2026-09-15 |
| CVE-2026-67368 | high | 8.8 | No | Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a netw... | 2026-09-15 |
| CVE-2026-67390 | medium | 6.5 | No | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. | 2026-09-15 |