Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-40315 | critical | 9.8 | No | PraisonAI is a multi-agent teams system. Prior to 4.5.133, there is an SQL identifier injection vulnerability in SQLiteConversationStore whe... | 2026-10-26 |
| CVE-2026-5936 | critical | 9.8 | No | An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinat... | 2026-10-26 |
| CVE-2026-40446 | critical | 9.8 | No | Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This... | 2026-10-26 |
| CVE-2026-4149 | critical | 9.8 | No | Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a... | 2026-10-26 |
| CVE-2026-40189 | critical | 9.8 | No | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.4, goshs enforces the documented per-folder .goshs ACL/basic-auth mechanism f... | 2026-10-26 |
| CVE-2026-34987 | critical | 9.9 | No | Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default comp... | 2026-10-26 |
| CVE-2026-5841 | critical | 9.8 | No | A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the function R7WebsSecurityHandler of the component HTTP H... | 2026-10-26 |
| CVE-2026-28808 | critical | 9.8 | No | Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rule... | 2026-10-26 |
| CVE-2026-34208 | critical | 10.0 | No | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, SandboxJS blocks direct assignment to global objects (for example Math.random... | 2026-10-26 |
| CVE-2026-5244 | critical | 9.8 | No | A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the comp... | 2026-10-26 |
| CVE-2026-34569 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34567 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34565 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34564 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34563 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34456 | critical | 9.8 | No | Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go. From version 26.2.0-beta.1 t... | 2026-10-26 |
| CVE-2026-34072 | critical | 9.8 | No | Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs. Prior to version 2... | 2026-10-26 |
| CVE-2026-34430 | critical | 9.6 | No | ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to ex... | 2026-10-26 |
| CVE-2026-33994 | critical | 9.8 | No | Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Starting in version 2.0.39 and prior to versio... | 2026-10-26 |
| CVE-2026-33879 | critical | 9.8 | No | Federated Learning and Interoperability Platform (FLIP) is an open-source platform for federated training and evaluation of medical imaging... | 2026-10-26 |