Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116060 | high | 7.3 | No | A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/add... | 2026-10-26 |
| CVE-2026-116056 | medium | 6.3 | No | A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe of the file app/function/web.function.ph... | 2026-10-26 |
| CVE-2026-116053 | medium | 5.3 | No | A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function source_special_command_is_safe of th... | 2026-10-26 |
| CVE-2026-116068 | high | 8.8 | No | Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other ten... | 2026-10-26 |
| CVE-2026-115680 | medium | 6.5 | No | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission | 2026-10-26 |
| CVE-2026-115679 | medium | 6.5 | No | Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer | 2026-10-26 |
| CVE-2026-115718 | medium | 4.3 | No | Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt endpoint that allows any aut... | 2026-10-26 |
| CVE-2026-115678 | medium | 5.3 | No | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing | 2026-10-26 |
| CVE-2026-110733 | medium | 5.4 | No | Vulnerability in the SQL storage module of Apache SIS. When sorting a stream of features, the clause is copied after ORDER BY without quotin... | 2026-10-26 |
| CVE-2026-110845 | not reported | — | No | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, whic... | 2026-10-26 |
| CVE-2026-110640 | critical | 9.8 | No | Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted fil... | 2026-10-26 |
| CVE-2026-110635 | critical | 9.8 | No | webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via exe... | 2026-10-26 |
| CVE-2026-110620 | medium | 6.8 | No | Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that... | 2026-10-26 |
| CVE-2026-110610 | medium | 5.4 | No | ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that allows authenti... | 2026-10-26 |
| CVE-2026-110605 | medium | 5.5 | No | libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with units... | 2026-10-26 |
| CVE-2026-110595 | medium | 4.3 | No | BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CSV uploads befor... | 2026-10-26 |
| CVE-2026-110270 | medium | 5.5 | No | OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET s... | 2026-10-26 |
| CVE-2026-110259 | medium | 5.5 | No | OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to ca... | 2026-10-26 |
| CVE-2026-109574 | medium | 5.5 | No | Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the p... | 2026-10-26 |
| CVE-2026-109571 | medium | 4.3 | No | Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to sub... | 2026-10-26 |