Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-80909 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same c... | 2026-09-07 |
| CVE-2026-80908 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potent... | 2026-09-07 |
| CVE-2026-80907 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use... | 2026-09-07 |
| CVE-2026-80899 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely EROFS over fscache was introduc... | 2026-09-07 |
| CVE-2026-80883 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X cli... | 2026-09-07 |
| CVE-2026-80785 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lock_fb_info() show_mode(), sh... | 2026-09-07 |
| CVE-2026-33211 | critical | 9.6 | No | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1... | 2026-09-07 |
| CVE-2026-85311 | medium | 5.3 | No | Missing Authorization vulnerability in Kings Plugins MarketKing allows Exploiting Incorrectly Configured Access Control Security Levels. Th... | 2026-09-07 |
| CVE-2026-85308 | medium | 5.3 | No | Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access... | 2026-09-07 |
| CVE-2026-85302 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates... | 2026-09-07 |
| CVE-2026-84834 | critical | 9.8 | No | Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions. | 2026-09-07 |
| CVE-2026-84778 | high | 7.5 | No | Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning <= 6.65 versions. | 2026-09-07 |
| CVE-2026-84769 | medium | 6.5 | No | Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions. | 2026-09-07 |
| CVE-2026-84763 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions. | 2026-09-07 |
| CVE-2026-84756 | high | 7.1 | No | Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions. | 2026-09-07 |
| CVE-2026-84238 | critical | 9.8 | No | Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions. | 2026-09-07 |
| CVE-2026-81295 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions. | 2026-09-07 |
| CVE-2026-27086 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS.... | 2026-09-07 |
| CVE-2026-11613 | critical | 9.8 | No | The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_... | 2026-09-07 |
| CVE-2026-85225 | high | 7.3 | No | A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient_... | 2026-09-05 |