Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82733 | not reported | — | No | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker... | 2026-09-01 |
| CVE-2026-82732 | not reported | — | No | Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument values outside a declared... | 2026-09-01 |
| CVE-2026-82731 | not reported | — | No | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ash-project ash_typescript allows an attacker who controls a path-param... | 2026-09-01 |
| CVE-2026-82730 | not reported | — | No | Incorrect Authorization vulnerability in ash-project ash_typescript allows an unauthorized RPC caller to read attribute values that Ash fiel... | 2026-09-01 |
| CVE-2026-77950 | not reported | — | No | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker... | 2026-09-01 |
| CVE-2026-77856 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhau... | 2026-09-01 |
| CVE-2026-74837 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_typescript allows an unauthenticated attacker to exhau... | 2026-09-01 |
| CVE-2026-18931 | critical | 9.1 | No | Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Retri... | 2026-09-01 |
| CVE-2026-18780 | high | 7.1 | No | Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows C... | 2026-09-01 |
| CVE-2026-18771 | high | 7.5 | No | Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Softwa... | 2026-09-01 |
| CVE-2026-18630 | high | 8.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TMT Machine Industry and Trade Ltd. Co... | 2026-09-01 |
| CVE-2026-84232 | medium | 5.4 | No | A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original con... | 2026-09-01 |
| CVE-2026-19471 | not reported | — | No | Multiple stored cross-site scripting security issues exist within ArmorStart® LT. Stored XSS occurs when user input is not properly sanitize... | 2026-09-01 |
| CVE-2026-11873 | medium | 6.5 | No | An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for u... | 2026-09-01 |
| CVE-2026-51766 | high | 7.5 | No | Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reboot the lo... | 2026-09-01 |
| CVE-2026-51761 | medium | 5.3 | No | Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to refresh the LA... | 2026-09-01 |
| CVE-2026-51756 | medium | 5.9 | No | Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start firmw... | 2026-09-01 |
| CVE-2026-51752 | medium | 5.3 | No | Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger sta... | 2026-09-01 |
| CVE-2026-51748 | medium | 5.9 | No | Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to upd... | 2026-09-01 |
| CVE-2026-51745 | medium | 5.3 | No | Incorrect access control in the updatePriStaList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to refresh t... | 2026-09-01 |