Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-88648 | low | 3.7 | No | Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PK... | 2026-10-29 |
| CVE-2026-56834 | high | 7.5 | No | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context Discovery feature exposes... | 2026-10-29 |
| CVE-2026-59188 | medium | 5.4 | No | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server sanitizes SVG files... | 2026-10-29 |
| CVE-2026-54630 | critical | 9.6 | No | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler... | 2026-10-29 |
| CVE-2026-67615 | high | 8.8 | No | openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated non-guest user to ex... | 2026-10-29 |
| CVE-2026-52356 | high | 8.8 | No | An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execut... | 2026-10-29 |
| CVE-2026-43840 | not reported | — | No | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the... | 2026-10-29 |
| CVE-2026-42693 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows Reflected... | 2026-10-29 |
| CVE-2026-21589 | high | 7.5 | Listed | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Ba... | 2026-10-29 |
| CVE-2026-118984 | medium | 5.5 | No | OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or admin-scoped API keys o... | 2026-10-29 |
| CVE-2026-115726 | high | 7.8 | No | Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider... | 2026-10-29 |
| CVE-2026-115722 | medium | 6.1 | No | RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list prope... | 2026-10-29 |
| CVE-2026-115536 | medium | 4.3 | No | A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The impacted element i... | 2026-10-29 |
| CVE-2026-115485 | medium | 6.3 | No | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL... | 2026-10-29 |
| CVE-2026-115509 | medium | 4.2 | No | Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst witho... | 2026-10-29 |
| CVE-2026-115505 | high | 7.6 | No | libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads... | 2026-10-29 |
| CVE-2026-115393 | low | 3.8 | No | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability becau... | 2026-10-29 |
| CVE-2026-115389 | low | 2.3 | No | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations when lifting guest... | 2026-10-29 |
| CVE-2026-115377 | critical | 9.9 | No | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migratio... | 2026-10-29 |
| CVE-2026-113912 | high | 7.1 | No | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPa... | 2026-10-29 |