Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-9621 | not reported | — | No | A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A c... | 2026-09-01 |
| CVE-2026-16675 | not reported | — | No | A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the ins... | 2026-09-01 |
| CVE-2026-12663 | not reported | — | No | A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation... | 2026-09-01 |
| CVE-2026-12661 | not reported | — | No | A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated co... | 2026-09-01 |
| CVE-2026-84235 | not reported | — | No | A denial-of-service security issue exists in the affected product. The security issue stems from a crafted CIP packet being sent crashing th... | 2026-09-01 |
| CVE-2026-19472 | not reported | — | No | A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT reque... | 2026-09-01 |
| CVE-2026-84109 | medium | 6.3 | No | A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/web... | 2026-09-01 |
| CVE-2026-84153 | medium | 6.3 | No | A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=... | 2026-09-01 |
| CVE-2026-10195 | high | 8.8 | No | The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient... | 2026-09-01 |
| CVE-2026-84115 | high | 8.3 | No | A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the co... | 2026-09-01 |
| CVE-2026-84114 | medium | 6.3 | No | A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the compo... | 2026-09-01 |
| CVE-2026-84111 | high | 7.3 | No | A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxf_dump_table.php. This manipul... | 2026-09-01 |
| CVE-2026-19513 | high | 8.1 | No | The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.2. This is due to in... | 2026-09-01 |
| CVE-2026-84061 | medium | 6.3 | No | A security flaw has been discovered in zhongyu09 OpenChatBI up to 0.3.0. Affected by this vulnerability is the function _validate_sql_safety... | 2026-09-01 |
| CVE-2026-7877 | medium | 6.4 | No | The WP Recipe Maker Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprm-call-to-action' shortco... | 2026-09-01 |
| CVE-2026-77194 | medium | 5.3 | No | The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up t... | 2026-09-01 |
| CVE-2026-84059 | high | 7.4 | No | A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the f... | 2026-09-01 |
| CVE-2026-19914 | high | 7.2 | No | The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_order' parameter in all versions up... | 2026-09-01 |
| CVE-2026-16788 | medium | 6.4 | No | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_project... | 2026-09-01 |
| CVE-2026-16786 | medium | 6.4 | No | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslc_module_testimo... | 2026-09-01 |