Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85100 | medium | 4.3 | No | A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of... | 2026-09-03 |
| CVE-2026-85040 | medium | 4.7 | No | A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi... | 2026-09-03 |
| CVE-2026-85031 | critical | 9.9 | No | A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing... | 2026-09-03 |
| CVE-2026-85022 | low | 3.5 | No | A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the function router.replace of the file web/app/... | 2026-09-03 |
| CVE-2026-85021 | medium | 4.3 | No | A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of the file web/app/(shareLayout)/componen... | 2026-09-03 |
| CVE-2026-3852 | medium | 6.4 | No | The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the Social Media Follow... | 2026-09-03 |
| CVE-2026-2573 | medium | 6.4 | No | The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to Stored Cross-Si... | 2026-09-03 |
| CVE-2026-84888 | medium | 4.3 | No | A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec of the file crates/op... | 2026-09-03 |
| CVE-2026-84887 | medium | 4.3 | No | A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding... | 2026-09-03 |
| CVE-2026-84885 | medium | 4.3 | No | A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code_agent.py of the componen... | 2026-09-03 |
| CVE-2026-84840 | medium | 6.5 | No | A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the... | 2026-09-03 |
| CVE-2026-84839 | medium | 5.3 | No | A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xm... | 2026-09-03 |
| CVE-2026-84833 | medium | 4.3 | No | A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unkno... | 2026-09-03 |
| CVE-2026-51764 | critical | 9.8 | No | Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to... | 2026-09-03 |
| CVE-2026-51763 | critical | 9.8 | No | Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forcibly dis... | 2026-09-03 |
| CVE-2026-51760 | critical | 9.8 | No | Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-trigg... | 2026-09-03 |
| CVE-2026-51757 | critical | 9.8 | No | Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a fi... | 2026-09-03 |
| CVE-2026-51751 | critical | 9.8 | No | Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove a sp... | 2026-09-03 |
| CVE-2026-51750 | critical | 9.8 | No | Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rescan an... | 2026-09-03 |
| CVE-2026-51744 | critical | 9.8 | No | Incorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to force... | 2026-09-03 |