Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-51743 | critical | 9.1 | No | Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable gu... | 2026-09-01 |
| CVE-2026-51742 | medium | 5.9 | No | Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger WAN di... | 2026-09-01 |
| CVE-2026-13348 | not reported | — | No | CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized ac... | 2026-09-01 |
| CVE-2026-13337 | not reported | — | No | CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when... | 2026-09-01 |
| CVE-2026-13336 | not reported | — | No | CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause exe... | 2026-09-01 |
| CVE-2026-10420 | medium | 5.5 | No | Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 10... | 2026-09-01 |
| CVE-2026-84165 | not reported | — | No | A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerab... | 2026-09-01 |
| CVE-2026-82927 | medium | 5.5 | No | Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06... | 2026-09-01 |
| CVE-2026-82926 | medium | 5.5 | No | NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59a... | 2026-09-01 |
| CVE-2026-4813 | not reported | — | No | A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute co... | 2026-09-01 |
| CVE-2026-78363 | medium | 4.8 | No | The MW WP Form WordPress plugin before 5.1.5 does not prevent shortcodes in user-submitted values from being executed when it merges those v... | 2026-09-01 |
| CVE-2026-74916 | medium | 6.5 | No | The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while s... | 2026-09-01 |
| CVE-2026-13611 | medium | 5.3 | No | The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated att... | 2026-09-01 |
| CVE-2024-7953 | not reported | — | No | A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If explo... | 2026-09-01 |
| CVE-2026-9637 | not reported | — | No | A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper... | 2026-09-01 |
| CVE-2026-9634 | not reported | — | No | A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path... | 2026-09-01 |
| CVE-2026-9633 | not reported | — | No | A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system pat... | 2026-09-01 |
| CVE-2026-9625 | not reported | — | No | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause... | 2026-09-01 |
| CVE-2026-9624 | not reported | — | No | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to... | 2026-09-01 |
| CVE-2026-9622 | not reported | — | No | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSL... | 2026-09-01 |