Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111459 | not reported | — | No | An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthentica... | 2026-10-27 |
| CVE-2026-57196 | not reported | — | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-10-27 |
| CVE-2026-107147 | not reported | — | No | The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the l... | 2026-10-27 |
| CVE-2026-107146 | not reported | — | No | The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of ser... | 2026-10-27 |
| CVE-2026-107145 | not reported | — | No | The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting... | 2026-10-27 |
| CVE-2026-116883 | medium | 4.8 | No | Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to... | 2026-10-27 |
| CVE-2026-116882 | medium | 4.8 | No | Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema... | 2026-10-27 |
| CVE-2026-116879 | medium | 5.4 | No | Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with... | 2026-10-27 |
| CVE-2026-116878 | high | 7.5 | No | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to fo... | 2026-10-27 |
| CVE-2026-116802 | medium | 6.1 | No | DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attributeName=href guard when... | 2026-10-27 |
| CVE-2026-117537 | medium | 4.1 | No | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the t... | 2026-10-27 |
| CVE-2026-117533 | medium | 4.4 | No | REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_media_service moves uploaded SVG files int... | 2026-10-27 |
| CVE-2026-116898 | high | 7.1 | No | REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission,... | 2026-10-27 |
| CVE-2026-116894 | medium | 4.2 | No | REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the... | 2026-10-27 |
| CVE-2026-65151 | high | 8.4 | No | NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerabi... | 2026-10-27 |
| CVE-2026-65145 | critical | 10.0 | No | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lea... | 2026-10-27 |
| CVE-2026-65120 | high | 7.1 | No | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulne... | 2026-10-27 |
| CVE-2026-65119 | high | 8.4 | No | NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusi... | 2026-10-27 |
| CVE-2026-24269 | high | 7.1 | No | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulne... | 2026-10-27 |
| CVE-2026-107590 | not reported | — | No | An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and ea... | 2026-10-27 |