Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-115996 | low | 3.7 | No | A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.conne... | 2026-10-26 |
| CVE-2026-115981 | low | 2.4 | No | A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file up... | 2026-10-26 |
| CVE-2026-115971 | medium | 5.3 | No | A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the compon... | 2026-10-26 |
| CVE-2026-115889 | critical | 9.9 | No | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that... | 2026-10-26 |
| CVE-2026-115803 | medium | 4.3 | No | A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChart... | 2026-10-26 |
| CVE-2026-115800 | medium | 5.3 | No | A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mo... | 2026-10-26 |
| CVE-2026-111766 | low | 3.7 | No | markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur... | 2026-10-26 |
| CVE-2026-110938 | not reported | — | No | In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during p... | 2026-10-26 |
| CVE-2026-111075 | not reported | — | No | In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled `_size`,... | 2026-10-26 |
| CVE-2026-111074 | not reported | — | No | In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When pro... | 2026-10-26 |
| CVE-2026-110690 | high | 7.5 | No | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where t... | 2026-10-26 |
| CVE-2026-110256 | low | 3.7 | No | Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts... | 2026-10-26 |
| CVE-2026-110018 | high | 8.8 | No | The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable t... | 2026-10-26 |
| CVE-2026-10759 | medium | 5.5 | No | A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search... | 2026-10-26 |
| CVE-2026-109561 | medium | 4.2 | No | goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Appr... | 2026-10-26 |
| CVE-2026-102941 | high | 7.5 | No | The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61... | 2026-10-26 |
| CVE-2021-48012 | high | 8.2 | No | fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying TOML cont... | 2026-10-26 |
| CVE-2026-98144 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdna_cmd_s... | 2026-10-26 |
| CVE-2026-98145 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain... | 2026-10-26 |
| CVE-2026-33821 | critical | 9.9 | No | Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network... | 2026-10-26 |