Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86225 | high | 7.3 | No | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysql... | 2026-09-08 |
| CVE-2026-86220 | high | 7.3 | No | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqli_query of t... | 2026-09-08 |
| CVE-2026-86179 | medium | 5.3 | No | A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of the file /Daily-Expense-Manager/exp_ak.... | 2026-09-08 |
| CVE-2026-86168 | high | 7.3 | No | A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file... | 2026-09-08 |
| CVE-2026-86167 | critical | 9.9 | No | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the... | 2026-09-08 |
| CVE-2026-86163 | medium | 6.3 | No | A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro_del.p... | 2026-09-08 |
| CVE-2026-86153 | critical | 9.1 | No | A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Red... | 2026-09-08 |
| CVE-2026-86148 | critical | 9.1 | No | A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of... | 2026-09-08 |
| CVE-2026-85701 | medium | 5.3 | No | A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function... | 2026-09-08 |
| CVE-2026-85643 | medium | 4.7 | No | A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_query of the file admin/adduser.php. Exec... | 2026-09-08 |
| CVE-2026-85636 | medium | 5.3 | No | A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py o... | 2026-09-08 |
| CVE-2026-17057 | critical | 9.1 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authenticat... | 2026-09-08 |
| CVE-2026-16689 | medium | 5.5 | No | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1... | 2026-09-08 |
| CVE-2026-13297 | high | 7.5 | No | IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack. | 2026-09-08 |
| CVE-2025-38352 | high | 7.8 | Listed | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_... | 2026-09-08 |
| CVE-2026-84327 | medium | 6.5 | No | Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engine... | 2026-09-08 |
| CVE-2026-70178 | high | 8.8 | No | Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network. | 2026-09-08 |
| CVE-2026-84330 | medium | 5.4 | No | UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via... | 2026-09-08 |
| CVE-2026-83959 | high | 7.8 | No | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context... | 2026-09-08 |
| CVE-2026-80098 | critical | 10.0 | No | Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network. | 2026-09-08 |