Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85079 | critical | 9.8 | No | In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code... | 2026-10-29 |
| CVE-2026-85080 | critical | 9.1 | No | In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited nu... | 2026-10-29 |
| CVE-2026-94502 | critical | 9.8 | No | In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote... | 2026-10-29 |
| CVE-2026-75508 | high | 7.5 | No | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's max_tokens limi... | 2026-10-29 |
| CVE-2026-61791 | high | 7.4 | No | OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior... | 2026-10-29 |
| CVE-2026-25439 | high | 8.1 | No | Authentication Bypass Using an Alternate Path or Channel vulnerability in Booknetic Booknetic booknetic allows Authentication Abuse.This iss... | 2026-10-29 |
| CVE-2026-39746 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booknetic Booknetic booknetic allows B... | 2026-10-29 |
| CVE-2026-115373 | medium | 6.3 | No | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.0/operations/{uuid}... | 2026-10-29 |
| CVE-2026-115369 | low | 2.2 | No | OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs taken from a CSR when use_csr_sans... | 2026-10-29 |
| CVE-2026-115363 | low | 3.3 | No | OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that exposes the tls_acme_eab_mac_key val... | 2026-10-29 |
| CVE-2026-115359 | low | 3.7 | No | OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution fails for requests with... | 2026-10-29 |
| CVE-2026-115411 | medium | 5.0 | No | crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() fails to block... | 2026-10-29 |
| CVE-2026-115351 | medium | 4.7 | No | Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling markdown input to inject arbitrary... | 2026-10-29 |
| CVE-2026-114608 | not reported | — | No | Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINT_HOME... | 2026-10-29 |
| CVE-2026-115249 | medium | 4.6 | No | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown... | 2026-10-29 |
| CVE-2026-115246 | low | 3.5 | No | A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects... | 2026-10-29 |
| CVE-2026-115332 | high | 8.8 | No | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering craft... | 2026-10-29 |
| CVE-2026-115324 | high | 8.1 | No | mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by... | 2026-10-29 |
| CVE-2026-115319 | low | 2.5 | No | fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows local attackers to... | 2026-10-29 |
| CVE-2026-108360 | medium | 6.4 | No | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Workshee... | 2026-10-29 |