Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113790 | not reported | — | No | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with... | 2026-10-28 |
| CVE-2026-5821 | high | 8.1 | No | The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versions up to and including 1.7.4. This is due to insu... | 2026-10-28 |
| CVE-2026-11592 | medium | 4.3 | No | The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerab... | 2026-10-28 |
| CVE-2026-92925 | high | 7.1 | No | A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly... | 2026-10-28 |
| CVE-2026-18326 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-114252 | medium | 6.3 | No | A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is... | 2026-10-27 |
| CVE-2026-114387 | high | 8.8 | No | Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only access_dashboard t... | 2026-10-27 |
| CVE-2026-112155 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-111563 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-111479 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-111467 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-113786 | not reported | — | No | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the... | 2026-10-27 |
| CVE-2026-114249 | high | 7.3 | No | A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913... | 2026-10-27 |
| CVE-2026-114242 | high | 7.3 | No | A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a49... | 2026-10-27 |
| CVE-2025-12534 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2024-58379 | medium | 5.3 | No | nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set... | 2026-10-27 |
| CVE-2024-58378 | not reported | — | No | Rejected reason: This CVE ID has been rejected as a duplicate. | 2026-10-27 |
| CVE-2024-58377 | not reported | — | No | Rejected reason: This CVE ID has been rejected as a duplicate. | 2026-10-27 |
| CVE-2024-53326 | high | 7.3 | No | LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(), leading to code e... | 2026-10-27 |
| CVE-2024-51092 | critical | 9.1 | No | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(),... | 2026-10-27 |