Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-34236 | critical | 9.8 | No | Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From version 8.0.0 to before version 8.19.0, in applications built with... | 2026-10-26 |
| CVE-2026-5257 | critical | 9.8 | No | A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffi... | 2026-10-26 |
| CVE-2026-5256 | critical | 9.8 | No | A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the com... | 2026-10-26 |
| CVE-2026-33993 | critical | 9.8 | No | Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.25, the `unserialize()` f... | 2026-10-26 |
| CVE-2026-33896 | critical | 9.1 | No | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, `pki.verifyCe... | 2026-10-26 |
| CVE-2026-33654 | critical | 9.8 | No | nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processin... | 2026-10-26 |
| CVE-2026-4963 | critical | 10.0 | No | A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_wi... | 2026-10-26 |
| CVE-2026-33770 | critical | 9.8 | No | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `fixCleanTitle()` static method in `objects/category... | 2026-10-26 |
| CVE-2026-4622 | critical | 9.8 | No | OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network. | 2026-10-26 |
| CVE-2026-4620 | critical | 9.8 | No | OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network. | 2026-10-26 |
| CVE-2026-33280 | critical | 9.8 | No | Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging fu... | 2026-10-26 |
| CVE-2026-32669 | critical | 9.8 | No | Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed... | 2026-10-26 |
| CVE-2026-27650 | critical | 9.8 | No | OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may... | 2026-10-26 |
| CVE-2026-0700 | critical | 9.8 | No | A vulnerability was determined in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /intern... | 2026-10-26 |
| CVE-2026-0640 | critical | 9.8 | No | A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a man... | 2026-10-26 |
| CVE-2026-0607 | critical | 9.8 | No | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminViewSongs.php... | 2026-10-26 |
| CVE-2026-0606 | critical | 9.8 | No | A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Front... | 2026-10-26 |
| CVE-2026-0605 | critical | 9.8 | No | A security vulnerability has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionalit... | 2026-10-26 |
| CVE-2026-0597 | critical | 9.8 | No | A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retaile... | 2026-10-26 |
| CVE-2026-0592 | critical | 9.8 | No | A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This affects an unknown function of the file /ha... | 2026-10-26 |