Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86100 | medium | 6.4 | No | Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature.... | 2026-09-08 |
| CVE-2026-85604 | high | 8.8 | No | Grav before 2.0.18 (affected versions <= 2.0.17) contains a remote code execution vulnerability in the Twig sort filter. The sortFunc wrappe... | 2026-09-08 |
| CVE-2026-85602 | medium | 5.3 | No | The Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which... | 2026-09-08 |
| CVE-2026-85600 | medium | 5.4 | No | Grav Admin (getgrav/grav-plugin-admin2) versions <= 2.0.19 contain a stored cross-site scripting vulnerability in the tHtml() function (src/... | 2026-09-08 |
| CVE-2026-85599 | high | 7.2 | No | Grav Shortcode Core before 6.2.5 contains stored cross-site scripting vulnerabilities in the [lorem] tag parameter and [details] summary par... | 2026-09-08 |
| CVE-2026-85592 | low | 3.7 | No | phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed()... | 2026-09-08 |
| CVE-2026-85590 | not reported | — | No | phpMyFAQ before 4.1.8 contains an authentication bypass vulnerability in its two-factor authentication (TOTP) disable functionality. The rem... | 2026-09-08 |
| CVE-2026-85589 | not reported | — | No | phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-healt... | 2026-09-08 |
| CVE-2026-85587 | not reported | — | No | phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inac... | 2026-09-08 |
| CVE-2026-85585 | high | 7.5 | No | SiYuan before v3.8.2 contains an unbounded resource consumption vulnerability in the request-concurrency middleware that retains mutex entri... | 2026-09-08 |
| CVE-2026-85584 | high | 7.5 | No | SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle that stores failed-attemp... | 2026-09-08 |
| CVE-2026-85582 | medium | 6.5 | No | SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows auth... | 2026-09-08 |
| CVE-2026-85580 | medium | 6.5 | No | SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on... | 2026-09-08 |
| CVE-2026-85579 | medium | 4.3 | No | SiYuan is affected by an information disclosure vulnerability (confirmed in v3.8.1, fixed in v3.8.2) in the reader-accessible POST /api/tran... | 2026-09-08 |
| CVE-2026-85577 | medium | 5.4 | No | AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php that allows unauthenticated attacke... | 2026-09-08 |
| CVE-2026-18664 | critical | 9.1 | No | When ranges are used for access control (i.e. of the form 1.2.3.4-1.2.3.25), because NSD wrongly compares the IP address with the range on l... | 2026-09-08 |
| CVE-2026-86252 | medium | 5.3 | No | h3 versions before 1.15.9 fail to sanitize carriage return characters in EventStream data and comment fields, allowing attackers to inject a... | 2026-09-08 |
| CVE-2026-86205 | medium | 5.4 | No | h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack() utility that fails to sanitize protocol-relative... | 2026-09-08 |
| CVE-2026-86175 | medium | 6.5 | No | NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with o... | 2026-09-08 |
| CVE-2026-86257 | medium | 5.4 | No | wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export endpoint, allowing any gym member to inject s... | 2026-09-08 |