Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82389 | medium | 6.5 | No | In the Bluetooth Classic Hands-Free Profile Audio Gateway role, hfp_ag_create() in subsys/bluetooth/host/classic/hfp_ag.c starts an SDP disc... | 2026-10-26 |
| CVE-2026-82388 | medium | 5.3 | No | bt_hfp_hf_connect() in subsys/bluetooth/host/classic/hfp_hf.c allocates the per-connection HFP Hands-Free object with hfp_hf_create(), which... | 2026-10-26 |
| CVE-2026-115883 | not reported | — | No | LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-che... | 2026-10-26 |
| CVE-2026-93441 | high | 8.6 | No | IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. | 2026-10-26 |
| CVE-2026-65825 | high | 7.5 | No | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, a r... | 2026-10-26 |
| CVE-2026-52167 | medium | 6.2 | No | A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying... | 2026-10-26 |
| CVE-2026-50787 | high | 7.5 | No | e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The appl... | 2026-10-26 |
| CVE-2026-116049 | high | 7.3 | No | A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the... | 2026-10-26 |
| CVE-2026-116046 | medium | 5.3 | No | A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getCustomDoc/writeCustomDoc/rmCustomDoc of t... | 2026-10-26 |
| CVE-2026-116019 | high | 8.8 | No | Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public static methods by r... | 2026-10-26 |
| CVE-2026-116015 | medium | 4.3 | No | yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated me... | 2026-10-26 |
| CVE-2026-116007 | low | 3.7 | No | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element is the function SmsCodeServiceImpl.validateS... | 2026-10-26 |
| CVE-2026-116000 | high | 7.3 | No | A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file... | 2026-10-26 |
| CVE-2026-115996 | low | 3.7 | No | A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.conne... | 2026-10-26 |
| CVE-2026-115981 | low | 2.4 | No | A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file up... | 2026-10-26 |
| CVE-2026-115971 | medium | 5.3 | No | A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the compon... | 2026-10-26 |
| CVE-2026-115889 | critical | 9.9 | No | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that... | 2026-10-26 |
| CVE-2026-115803 | medium | 4.3 | No | A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChart... | 2026-10-26 |
| CVE-2026-115800 | medium | 5.3 | No | A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mo... | 2026-10-26 |
| CVE-2026-111766 | low | 3.7 | No | markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur... | 2026-10-26 |