Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84437 | low | 3.5 | No | A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/ad... | 2026-09-03 |
| CVE-2026-84423 | high | 7.3 | No | A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component... | 2026-09-03 |
| CVE-2026-84117 | high | 8.8 | No | Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155. | 2026-09-03 |
| CVE-2026-73712 | high | 8.1 | No | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the... | 2026-09-03 |
| CVE-2026-19590 | high | 7.3 | No | OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the reposito... | 2026-09-03 |
| CVE-2026-73728 | medium | 6.5 | No | Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operato... | 2026-09-03 |
| CVE-2026-73729 | medium | 6.5 | No | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator use... | 2026-09-03 |
| CVE-2026-73730 | medium | 6.5 | No | A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticat... | 2026-09-03 |
| CVE-2026-73742 | medium | 4.3 | No | A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the s... | 2026-09-03 |
| CVE-2026-73731 | medium | 6.1 | No | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to co... | 2026-09-03 |
| CVE-2026-73743 | low | 3.7 | No | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to ga... | 2026-09-03 |
| CVE-2026-73741 | medium | 4.3 | No | A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system fi... | 2026-09-03 |
| CVE-2026-73739 | medium | 4.4 | No | A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sen... | 2026-09-03 |
| CVE-2026-73740 | medium | 4.4 | No | A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying... | 2026-09-03 |
| CVE-2026-73738 | medium | 4.7 | No | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator use... | 2026-09-03 |
| CVE-2026-73737 | medium | 4.8 | No | An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could... | 2026-09-03 |
| CVE-2026-73735 | medium | 5.4 | No | Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some informa... | 2026-09-03 |
| CVE-2026-73736 | medium | 5.3 | No | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to vi... | 2026-09-03 |
| CVE-2026-73734 | medium | 5.4 | No | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to re... | 2026-09-03 |
| CVE-2026-73733 | medium | 5.4 | No | Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent... | 2026-09-03 |