Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116253 | high | 7.3 | No | A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::_RunMagicQuotes of the file plus/... | 2026-10-26 |
| CVE-2026-116235 | critical | 9.1 | No | A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown functionality of the component L2TP Auth... | 2026-10-26 |
| CVE-2026-116232 | critical | 9.9 | No | A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function snmp_set of the component SNMP Handler. Executing... | 2026-10-26 |
| CVE-2026-116229 | low | 3.5 | No | A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted is the function clipboard.readText of the file app... | 2026-10-26 |
| CVE-2026-116224 | medium | 4.3 | No | A vulnerability has been found in fr0tt benotes up to 2.8.1. This affects the function getUrlInfo of the file app/Http/Controllers/PostContr... | 2026-10-26 |
| CVE-2026-116207 | critical | 9.1 | No | YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::pr... | 2026-10-26 |
| CVE-2026-116203 | medium | 6.1 | No | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacker-controlled token v... | 2026-10-26 |
| CVE-2026-116183 | high | 7.5 | No | phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers to modify or delete... | 2026-10-26 |
| CVE-2026-116167 | medium | 6.8 | No | SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page that assigns the to par... | 2026-10-26 |
| CVE-2026-116163 | high | 7.4 | No | Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp, validateLogin, and... | 2026-10-26 |
| CVE-2026-116123 | low | 3.7 | No | A weakness has been identified in NocoDB up to 2026.07.0. The affected element is the function validatePassword of the file /auth/user/signu... | 2026-10-26 |
| CVE-2026-116120 | medium | 5.6 | No | A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllUserToken of the... | 2026-10-26 |
| CVE-2026-116139 | medium | 5.4 | No | WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that allows authenticated commenters to inject JavaScri... | 2026-10-26 |
| CVE-2026-116117 | high | 7.3 | No | A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this vulnerability is the function run.halo.app.theme.DefaultViewNam... | 2026-10-26 |
| CVE-2026-116114 | low | 3.7 | No | A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component... | 2026-10-26 |
| CVE-2026-116108 | medium | 4.3 | No | A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_platform/core/openbb_core/app/... | 2026-10-26 |
| CVE-2026-116105 | low | 3.7 | No | A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the com... | 2026-10-26 |
| CVE-2026-116102 | medium | 6.3 | No | A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the fi... | 2026-10-26 |
| CVE-2026-116096 | medium | 5.3 | No | A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mt... | 2026-10-26 |
| CVE-2026-116063 | medium | 4.7 | No | A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manip... | 2026-10-26 |