Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116556 | low | 2.4 | No | A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotati... | 2026-10-27 |
| CVE-2026-116515 | medium | 6.3 | No | A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.... | 2026-10-27 |
| CVE-2026-116507 | medium | 5.3 | No | A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of t... | 2026-10-27 |
| CVE-2026-116504 | critical | 9.9 | No | A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_m... | 2026-10-27 |
| CVE-2026-116479 | medium | 4.3 | No | A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JSON-RPC Error Handler... | 2026-10-27 |
| CVE-2026-115927 | medium | 5.3 | No | Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked transfer encoding by... | 2026-10-27 |
| CVE-2026-69986 | high | 7.5 | No | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 2026-10-27 |
| CVE-2026-106174 | high | 7.5 | No | A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network a... | 2026-10-27 |
| CVE-2026-12887 | not reported | — | No | In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the sc... | 2026-10-27 |
| CVE-2026-102800 | not reported | — | No | Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful” voting widg... | 2026-10-27 |
| CVE-2026-117466 | not reported | — | No | In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator. | 2026-10-27 |
| CVE-2026-117341 | not reported | — | No | In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation is... | 2026-10-27 |
| CVE-2026-116870 | not reported | — | No | In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in a token issued from... | 2026-10-27 |
| CVE-2026-111548 | not reported | — | No | A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticate... | 2026-10-27 |
| CVE-2026-85299 | not reported | — | No | A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prio... | 2026-10-27 |
| CVE-2026-102789 | not reported | — | No | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPost... | 2026-10-27 |
| CVE-2026-102788 | not reported | — | No | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the value of the sort-by... | 2026-10-27 |
| CVE-2026-102787 | not reported | — | No | Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 | 2026-10-27 |
| CVE-2026-111461 | not reported | — | No | An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a... | 2026-10-27 |
| CVE-2026-111460 | not reported | — | No | A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote att... | 2026-10-27 |