Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-72756 | high | 7.5 | No | Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as too long file names,... | 2026-10-26 |
| CVE-2026-72755 | low | 3.8 | No | Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificat... | 2026-10-26 |
| CVE-2026-72754 | high | 7.5 | No | When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters a CRL file with the wrong enc... | 2026-10-26 |
| CVE-2026-72753 | high | 8.2 | No | When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to... | 2026-10-26 |
| CVE-2026-72752 | medium | 6.5 | No | Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be triggered maliciously by an a... | 2026-10-26 |
| CVE-2026-116408 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photobloc... | 2026-10-26 |
| CVE-2026-116400 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block all... | 2026-10-26 |
| CVE-2026-116398 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Content Slider Block content-... | 2026-10-26 |
| CVE-2026-115966 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Typing Text – Give your texts... | 2026-10-26 |
| CVE-2026-112839 | medium | 4.3 | No | Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Config... | 2026-10-26 |
| CVE-2026-111404 | low | 3.7 | No | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme Photo Reviews for Wo... | 2026-10-26 |
| CVE-2026-116403 | medium | 5.9 | No | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Awesomemotive Easy Digital Down... | 2026-10-26 |
| CVE-2026-116396 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Amelia ameliabooking allows Stored... | 2026-10-26 |
| CVE-2026-116395 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins LightBox Block lightbox-block... | 2026-10-26 |
| CVE-2026-116388 | medium | 5.3 | No | Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This... | 2026-10-26 |
| CVE-2026-115598 | medium | 5.3 | No | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Leve... | 2026-10-26 |
| CVE-2026-115597 | medium | 5.4 | No | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Leve... | 2026-10-26 |
| CVE-2026-114710 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photobloc... | 2026-10-26 |
| CVE-2026-116394 | medium | 5.3 | No | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc. WpEvently mage-eventpress all... | 2026-10-26 |
| CVE-2026-116282 | medium | 4.3 | No | A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the function CookieController.ListCookies of the file... | 2026-10-26 |