Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84890 | medium | 5.9 | No | undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While the number of content... | 2026-09-11 |
| CVE-2026-57166 | medium | 5.3 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in th... | 2026-09-11 |
| CVE-2026-57165 | medium | 5.3 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in th... | 2026-09-11 |
| CVE-2026-89179 | medium | 4.3 | No | WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticat... | 2026-09-11 |
| CVE-2026-89178 | high | 8.8 | No | WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attacker... | 2026-09-11 |
| CVE-2026-89177 | high | 8.8 | No | WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on Z... | 2026-09-11 |
| CVE-2026-89176 | high | 8.8 | No | WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated... | 2026-09-11 |
| CVE-2026-89175 | medium | 5.3 | No | Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated re... | 2026-09-11 |
| CVE-2026-89174 | high | 7.5 | No | Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticate... | 2026-09-11 |
| CVE-2026-87122 | not reported | — | No | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-85984. Reason: This candidate is a reservation duplicat... | 2026-09-11 |
| CVE-2026-73785 | high | 7.5 | No | A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial... | 2026-09-11 |
| CVE-2026-18562 | medium | 6.1 | No | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via SEO-friend... | 2026-09-11 |
| CVE-2026-86083 | high | 8.8 | No | n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source tex... | 2026-09-11 |
| CVE-2026-57164 | medium | 5.9 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the... | 2026-09-11 |
| CVE-2026-57163 | critical | 9.1 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in th... | 2026-09-11 |
| CVE-2026-57162 | critical | 9.1 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in th... | 2026-09-11 |
| CVE-2026-57161 | high | 8.2 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJ... | 2026-09-11 |
| CVE-2026-57160 | medium | 5.3 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip... | 2026-09-11 |
| CVE-2026-57159 | high | 7.5 | No | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and writ... | 2026-09-11 |
| CVE-2026-89258 | medium | 6.3 | No | Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during dire... | 2026-09-11 |