Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116167 | medium | 6.8 | No | SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page that assigns the to par... | 2026-10-26 |
| CVE-2026-116163 | high | 7.4 | No | Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp, validateLogin, and... | 2026-10-26 |
| CVE-2026-116123 | low | 3.7 | No | A weakness has been identified in NocoDB up to 2026.07.0. The affected element is the function validatePassword of the file /auth/user/signu... | 2026-10-26 |
| CVE-2026-116120 | medium | 5.6 | No | A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllUserToken of the... | 2026-10-26 |
| CVE-2026-116139 | medium | 5.4 | No | WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that allows authenticated commenters to inject JavaScri... | 2026-10-26 |
| CVE-2026-116117 | high | 7.3 | No | A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this vulnerability is the function run.halo.app.theme.DefaultViewNam... | 2026-10-26 |
| CVE-2026-116114 | low | 3.7 | No | A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component... | 2026-10-26 |
| CVE-2026-116108 | medium | 4.3 | No | A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_platform/core/openbb_core/app/... | 2026-10-26 |
| CVE-2026-116105 | low | 3.7 | No | A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the com... | 2026-10-26 |
| CVE-2026-116102 | medium | 6.3 | No | A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the fi... | 2026-10-26 |
| CVE-2026-116096 | medium | 5.3 | No | A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mt... | 2026-10-26 |
| CVE-2026-116063 | medium | 4.7 | No | A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manip... | 2026-10-26 |
| CVE-2026-116060 | high | 7.3 | No | A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/add... | 2026-10-26 |
| CVE-2026-116056 | medium | 6.3 | No | A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe of the file app/function/web.function.ph... | 2026-10-26 |
| CVE-2026-116053 | medium | 5.3 | No | A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function source_special_command_is_safe of th... | 2026-10-26 |
| CVE-2026-116068 | high | 8.8 | No | Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other ten... | 2026-10-26 |
| CVE-2026-115680 | medium | 6.5 | No | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission | 2026-10-26 |
| CVE-2026-115679 | medium | 6.5 | No | Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer | 2026-10-26 |
| CVE-2026-115718 | medium | 4.3 | No | Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any aut... | 2026-10-26 |
| CVE-2026-115678 | medium | 5.3 | No | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing | 2026-10-26 |