Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-5970 | critical | 9.8 | No | A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the component HumanEvalBen... | 2026-10-26 |
| CVE-2026-5962 | critical | 9.8 | No | A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component http... | 2026-10-26 |
| CVE-2026-34184 | critical | 9.1 | No | AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directori... | 2026-10-26 |
| CVE-2026-5849 | critical | 9.8 | No | A vulnerability was determined in Tenda i12 1.0.0.11(3862). The impacted element is an unknown function of the component HTTP Handler. Execu... | 2026-10-26 |
| CVE-2026-39324 | critical | 9.8 | No | Rack::Session is a session management implementation for Rack. From 2.0.0 to before 2.1.2, Rack::Session::Cookie incorrectly handles decrypt... | 2026-10-26 |
| CVE-2026-39305 | critical | 10.0 | No | PraisonAI is a multi-agent teams system. Prior to 1.5.113, the Action Orchestrator feature contains a Path Traversal vulnerability that allo... | 2026-10-26 |
| CVE-2026-23818 | critical | 9.6 | No | A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow a... | 2026-10-26 |
| CVE-2026-34444 | critical | 10.0 | No | Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attribute... | 2026-10-26 |
| CVE-2026-32871 | critical | 10.0 | No | FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to... | 2026-10-26 |
| CVE-2026-5334 | critical | 9.8 | No | A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.p... | 2026-10-26 |
| CVE-2026-5333 | critical | 9.8 | No | A security flaw has been discovered in DefaultFuction Content-Management-System 1.0. This issue affects some unknown processing of the file... | 2026-10-26 |
| CVE-2026-29143 | critical | 9.1 | No | SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allo... | 2026-10-26 |
| CVE-2026-29139 | critical | 9.8 | No | SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to reset a victim account... | 2026-10-26 |
| CVE-2026-29133 | critical | 9.1 | No | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address. | 2026-10-26 |
| CVE-2026-34571 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34566 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34562 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34560 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-34559 | critical | 9.0 | No | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support... | 2026-10-26 |
| CVE-2026-4101 | critical | 9.8 | No | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Ident... | 2026-10-26 |