Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-19795 | medium | 6.2 | No | Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY payloads. A malicious... | 2026-09-08 |
| CVE-2026-79707 | not reported | — | No | A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 on Python a... | 2026-09-08 |
| CVE-2026-4644 | not reported | — | No | A Missing Authorization vulnerability in HTTP Connector in Google Cloud Integration Connectors versions prior to 2025-12-11 on Google Cloud... | 2026-09-08 |
| CVE-2026-82729 | not reported | — | No | Inefficient Algorithmic Complexity vulnerability in elixir-mint mint allows a remote HTTP server to exhaust CPU on the client host and cause... | 2026-09-08 |
| CVE-2026-82728 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the... | 2026-09-08 |
| CVE-2026-86590 | not reported | — | No | In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied... | 2026-09-08 |
| CVE-2026-19727 | medium | 6.1 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulti... | 2026-09-08 |
| CVE-2026-19205 | high | 7.5 | No | Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMe... | 2026-09-08 |
| CVE-2026-77818 | medium | 6.1 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulti... | 2026-09-08 |
| CVE-2026-19081 | medium | 4.3 | No | Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constra... | 2026-09-08 |
| CVE-2026-19057 | medium | 5.4 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gastromenum Gastromenum Ticket and QR... | 2026-09-08 |
| CVE-2026-18198 | high | 8.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TAC Information Services Internal and... | 2026-09-08 |
| CVE-2026-19080 | high | 7.5 | No | Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menul... | 2026-09-08 |
| CVE-2026-19051 | high | 7.1 | No | Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue a... | 2026-09-08 |
| CVE-2026-19043 | medium | 4.3 | No | Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs.... | 2026-09-08 |
| CVE-2026-18957 | medium | 5.4 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Menulux Software Inc. Menulux Portal a... | 2026-09-08 |
| CVE-2026-6217 | medium | 6.3 | No | Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue... | 2026-09-08 |
| CVE-2026-85242 | not reported | — | No | PlaywrightCapture contains a server-side request forgery (SSRF) vulnerability in its favicon retrieval functionality. When only_global_looku... | 2026-09-08 |
| CVE-2026-85649 | high | 7.9 | No | (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root u... | 2026-09-08 |
| CVE-2026-85547 | not reported | — | No | A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF protections being disabled based on whether a... | 2026-09-08 |