Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-18556 | high | 7.4 | Listed | Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects... | 2026-10-23 |
| CVE-2026-91419 | high | 7.8 | No | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected... | 2026-10-23 |
| CVE-2026-91415 | high | 7.0 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Su... | 2026-10-23 |
| CVE-2026-57849 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-23 |
| CVE-2026-58497 | not reported | — | No | Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0... | 2026-10-23 |
| CVE-2026-55222 | medium | 5.1 | No | Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manual... | 2026-10-23 |
| CVE-2026-56837 | high | 8.6 | No | PraisonAI is a multi-agent teams system. From version 4.6.56 to before version 4.6.59, PraisonAI's LinearBot starts a public webhook listene... | 2026-10-23 |
| CVE-2026-56833 | high | 7.5 | No | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context module provides filesystem... | 2026-10-23 |
| CVE-2026-55835 | not reported | — | No | Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to ve... | 2026-10-23 |
| CVE-2026-46346 | medium | 6.5 | No | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the password... | 2026-10-23 |
| CVE-2026-53920 | not reported | — | No | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25.12.3, odhcpd's DHCP... | 2026-10-23 |
| CVE-2026-115570 | high | 7.4 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, a... | 2026-10-23 |
| CVE-2026-115537 | medium | 4.3 | No | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the function s... | 2026-10-23 |
| CVE-2026-115534 | medium | 4.3 | No | A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function ki... | 2026-10-23 |
| CVE-2026-115360 | medium | 4.7 | No | OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects users not authenticated to Open... | 2026-10-23 |
| CVE-2026-115352 | high | 7.5 | No | Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows unauthenticated attackers to exh... | 2026-10-23 |
| CVE-2026-112342 | high | 7.1 | No | Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows authenticated users t... | 2026-10-23 |
| CVE-2026-112330 | high | 7.5 | No | Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to cras... | 2026-10-23 |
| CVE-2026-115348 | high | 7.5 | No | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parse_link_text function that a... | 2026-10-23 |
| CVE-2026-114613 | high | 7.5 | No | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msgpack._cmsgpack) leak... | 2026-10-23 |