Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87815 | high | 8.7 | No | SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to validate the dec... | 2026-09-14 |
| CVE-2026-86819 | high | 7.1 | No | Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients... | 2026-09-14 |
| CVE-2026-85593 | medium | 5.4 | No | phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_e... | 2026-09-14 |
| CVE-2026-85588 | not reported | — | No | phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data export ZIP files. Attackers obtaining exported... | 2026-09-14 |
| CVE-2026-85507 | critical | 9.8 | No | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-i... | 2026-09-14 |
| CVE-2026-85389 | medium | 6.5 | No | Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing authenticated users... | 2026-09-14 |
| CVE-2026-79971 | medium | 5.3 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitiza... | 2026-09-14 |
| CVE-2026-82525 | medium | 5.5 | No | Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to read arbitrary files fr... | 2026-09-14 |
| CVE-2026-79946 | medium | 5.3 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali... | 2026-09-14 |
| CVE-2026-79729 | low | 3.7 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific... | 2026-09-14 |
| CVE-2026-79731 | medium | 4.4 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded... | 2026-09-14 |
| CVE-2026-79969 | medium | 5.9 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Executi... | 2026-09-14 |
| CVE-2026-79968 | medium | 5.9 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time... | 2026-09-14 |
| CVE-2026-79728 | medium | 6.5 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Trav... | 2026-09-14 |
| CVE-2026-79730 | medium | 5.6 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time... | 2026-09-14 |
| CVE-2026-79695 | high | 7.3 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling... | 2026-09-14 |
| CVE-2026-79573 | medium | 6.5 | No | L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the bus... | 2026-09-14 |
| CVE-2026-79577 | critical | 9.8 | No | An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sendi... | 2026-09-14 |
| CVE-2026-79379 | medium | 6.5 | No | A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed... | 2026-09-14 |
| CVE-2026-79389 | high | 7.4 | No | Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modif... | 2026-09-14 |