Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85378 | high | 7.3 | No | A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected... | 2026-09-11 |
| CVE-2026-83997 | high | 8.1 | No | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 2026-09-11 |
| CVE-2026-83990 | high | 7.8 | No | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 2026-09-11 |
| CVE-2026-82537 | high | 8.8 | No | Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a... | 2026-09-11 |
| CVE-2026-82004 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vu... | 2026-09-11 |
| CVE-2026-81825 | high | 7.2 | No | The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all... | 2026-09-11 |
| CVE-2026-81800 | critical | 9.3 | No | Unauthenticated SQL Injection in Verified Reviews (Avis Vérifiés) <= 2.4.6 versions. | 2026-09-11 |
| CVE-2026-81786 | high | 7.5 | No | Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce <= 1.2.2 versions. | 2026-09-11 |
| CVE-2026-81275 | medium | 6.5 | No | Subscriber Arbitrary File Download in Youzify <= 1.3.7 versions. | 2026-09-11 |
| CVE-2026-79698 | critical | 9.9 | No | A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610... | 2026-09-11 |
| CVE-2026-78172 | medium | 6.1 | No | The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in al... | 2026-09-11 |
| CVE-2026-77807 | high | 7.5 | No | The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directo... | 2026-09-11 |
| CVE-2026-79693 | low | 3.4 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Vi... | 2026-09-11 |
| CVE-2026-78444 | high | 8.1 | No | Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. | 2026-09-11 |
| CVE-2026-75927 | high | 7.2 | No | The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to P... | 2026-09-11 |
| CVE-2026-77187 | medium | 6.4 | No | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'before' and 'after' Shortc... | 2026-09-11 |
| CVE-2026-75711 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-75700 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-75692 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-75670 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |