Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118608 | low | 3.5 | No | Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allo... | 2026-10-29 |
| CVE-2026-118607 | medium | 6.8 | No | Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on... | 2026-10-29 |
| CVE-2026-118606 | high | 8.8 | No | Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent... | 2026-10-29 |
| CVE-2026-118605 | high | 8.0 | No | Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows net... | 2026-10-29 |
| CVE-2026-118604 | medium | 6.8 | No | Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically pres... | 2026-10-29 |
| CVE-2026-118603 | high | 8.0 | No | Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent at... | 2026-10-29 |
| CVE-2026-118602 | high | 7.8 | No | Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to e... | 2026-10-29 |
| CVE-2026-118601 | medium | 6.3 | No | Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to exec... | 2026-10-29 |
| CVE-2026-118619 | high | 8.8 | No | Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute... | 2026-10-29 |
| CVE-2026-118618 | high | 7.8 | No | Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary... | 2026-10-29 |
| CVE-2026-118617 | high | 7.8 | No | Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote... | 2026-10-29 |
| CVE-2026-118616 | high | 7.8 | No | Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary... | 2026-10-29 |
| CVE-2026-118615 | high | 7.8 | No | Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb... | 2026-10-29 |
| CVE-2026-118614 | high | 7.8 | No | Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi... | 2026-10-29 |
| CVE-2026-118613 | high | 7.8 | No | Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to... | 2026-10-29 |
| CVE-2026-39742 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Block... | 2026-10-29 |
| CVE-2026-114401 | medium | 5.3 | No | Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to enumerate usernames by... | 2026-10-29 |
| CVE-2026-115303 | low | 3.7 | No | The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted field values before co... | 2026-10-29 |
| CVE-2026-89216 | high | 8.6 | No | The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows u... | 2026-10-29 |
| CVE-2026-88928 | medium | 6.5 | No | The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signature on its payment notification endpoint w... | 2026-10-29 |