Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86669 | high | 7.3 | No | A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php... | 2026-09-08 |
| CVE-2026-86477 | not reported | — | No | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descri... | 2026-09-08 |
| CVE-2026-86287 | high | 7.5 | No | Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treat... | 2026-09-08 |
| CVE-2026-86304 | critical | 9.8 | No | MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::PO... | 2026-09-08 |
| CVE-2026-86283 | not reported | — | No | MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a secondary query of member events by UUID witho... | 2026-09-08 |
| CVE-2026-86237 | medium | 5.3 | No | A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the function test_default_model of the file sd... | 2026-09-08 |
| CVE-2026-86219 | critical | 9.8 | No | Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step.... | 2026-09-08 |
| CVE-2026-86164 | medium | 6.3 | No | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/trans... | 2026-09-08 |
| CVE-2026-86162 | high | 7.3 | No | A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /ajax.php?action=log... | 2026-09-08 |
| CVE-2026-86159 | high | 7.3 | No | A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_user. Th... | 2026-09-08 |
| CVE-2026-86149 | critical | 9.1 | No | A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This m... | 2026-09-08 |
| CVE-2026-85229 | medium | 6.1 | No | ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache... | 2026-09-08 |
| CVE-2026-82751 | not reported | — | No | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cos... | 2026-09-08 |
| CVE-2026-82750 | not reported | — | No | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cos... | 2026-09-08 |
| CVE-2026-82752 | not reported | — | No | Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to store a value of arbitrary size in... | 2026-09-08 |
| CVE-2026-82309 | medium | 4.3 | No | Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation l... | 2026-09-08 |
| CVE-2026-80181 | critical | 9.1 | No | Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects Apache Allura: through 1.20.0. Users are... | 2026-09-08 |
| CVE-2026-52691 | high | 8.8 | No | ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache... | 2026-09-08 |
| CVE-2026-47625 | high | 7.5 | No | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization. A successful exploit... | 2026-09-08 |
| CVE-2026-16497 | high | 7.5 | No | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration. A successful exploit of... | 2026-09-08 |