Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-119139 | medium | 4.8 | No | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call that rejects guest exports usi... | 2026-10-29 |
| CVE-2026-119136 | medium | 4.8 | No | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssem... | 2026-10-29 |
| CVE-2026-119135 | medium | 4.8 | No | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a different Rust item type tha... | 2026-10-29 |
| CVE-2026-119132 | medium | 4.8 | No | Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by tra... | 2026-10-29 |
| CVE-2026-119131 | medium | 5.3 | No | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability in wasmtime-wasi-http that lets guests cra... | 2026-10-29 |
| CVE-2026-119128 | high | 7.4 | No | ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set... | 2026-10-29 |
| CVE-2026-119127 | high | 8.1 | No | ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticated attackers to poiso... | 2026-10-29 |
| CVE-2026-119123 | low | 3.7 | No | ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attack... | 2026-10-29 |
| CVE-2026-119120 | high | 7.5 | No | Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authen... | 2026-10-29 |
| CVE-2026-119119 | high | 7.5 | No | Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails to cap the delay_be... | 2026-10-29 |
| CVE-2026-116641 | medium | 6.8 | No | The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However, the crypto/x509... | 2026-10-29 |
| CVE-2026-116052 | medium | 4.3 | No | A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipul... | 2026-10-29 |
| CVE-2026-116071 | medium | 5.9 | No | rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key i... | 2026-10-29 |
| CVE-2026-116067 | high | 8.2 | No | Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that let... | 2026-10-29 |
| CVE-2026-116048 | high | 7.3 | No | A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulner... | 2026-10-29 |
| CVE-2026-116045 | medium | 4.3 | No | A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file skills/motion-design... | 2026-10-29 |
| CVE-2026-116006 | high | 7.3 | No | A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file Au... | 2026-10-29 |
| CVE-2026-115999 | high | 7.3 | No | A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect o... | 2026-10-29 |
| CVE-2026-115995 | critical | 9.6 | No | A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume o... | 2026-10-29 |
| CVE-2026-115973 | high | 7.3 | No | A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendRese... | 2026-10-29 |