Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116890 | high | 7.3 | No | Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthen... | 2026-10-27 |
| CVE-2026-116887 | medium | 5.4 | No | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to i... | 2026-10-27 |
| CVE-2026-116886 | medium | 5.4 | No | Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to i... | 2026-10-27 |
| CVE-2026-116883 | medium | 4.8 | No | Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to... | 2026-10-27 |
| CVE-2026-116882 | medium | 4.8 | No | Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema... | 2026-10-27 |
| CVE-2026-116879 | medium | 5.4 | No | Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with... | 2026-10-27 |
| CVE-2026-116878 | high | 7.5 | No | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to fo... | 2026-10-27 |
| CVE-2026-116871 | high | 7.5 | No | Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription() that proces... | 2026-10-27 |
| CVE-2026-116802 | medium | 6.1 | No | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attributeName=href guard when... | 2026-10-27 |
| CVE-2026-117537 | medium | 4.1 | No | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the t... | 2026-10-27 |
| CVE-2026-117533 | medium | 4.4 | No | REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_media_service moves uploaded SVG files int... | 2026-10-27 |
| CVE-2026-116898 | high | 7.1 | No | REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission,... | 2026-10-27 |
| CVE-2026-116894 | medium | 4.2 | No | REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the... | 2026-10-27 |
| CVE-2026-65151 | high | 8.4 | No | NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerabi... | 2026-10-27 |
| CVE-2026-65145 | critical | 10.0 | No | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lea... | 2026-10-27 |
| CVE-2026-65120 | high | 7.1 | No | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulne... | 2026-10-27 |
| CVE-2026-65119 | high | 8.4 | No | NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusi... | 2026-10-27 |
| CVE-2026-24269 | high | 7.1 | No | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulne... | 2026-10-27 |
| CVE-2026-107590 | not reported | — | No | An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and ea... | 2026-10-27 |
| CVE-2026-117499 | low | 3.7 | No | @fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that r... | 2026-10-27 |