Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112775 | high | 7.5 | No | Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because... | 2026-10-22 |
| CVE-2026-112302 | medium | 6.3 | No | A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/Ar... | 2026-10-22 |
| CVE-2026-112770 | high | 8.8 | No | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which invokes non... | 2026-10-22 |
| CVE-2026-112297 | medium | 4.3 | No | A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the file blueprin... | 2026-10-22 |
| CVE-2026-112249 | low | 2.4 | No | A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/Grand.Web/Views/Prod... | 2026-10-22 |
| CVE-2026-112193 | low | 3.7 | No | A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filam... | 2026-10-22 |
| CVE-2026-111749 | not reported | — | No | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domai... | 2026-10-22 |
| CVE-2026-111063 | not reported | — | No | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is... | 2026-10-22 |
| CVE-2026-96563 | medium | 6.4 | No | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s'... | 2026-10-22 |
| CVE-2024-21762 | critical | 9.8 | Listed | A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, Fort... | 2026-10-22 |
| CVE-2026-91541 | medium | 6.5 | No | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported... | 2026-10-22 |
| CVE-2026-91453 | medium | 5.3 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightwe... | 2026-10-22 |
| CVE-2026-91452 | medium | 5.3 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network... | 2026-10-22 |
| CVE-2026-91451 | medium | 5.3 | No | Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32... | 2026-10-22 |
| CVE-2026-91418 | medium | 5.3 | No | Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (com... | 2026-10-22 |
| CVE-2026-91417 | medium | 5.3 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that... | 2026-10-22 |
| CVE-2026-91410 | medium | 5.3 | No | Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.... | 2026-10-22 |
| CVE-2026-91396 | medium | 6.5 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility... | 2026-10-22 |
| CVE-2026-91395 | medium | 6.5 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility... | 2026-10-22 |
| CVE-2026-91373 | medium | 5.3 | No | Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17... | 2026-10-22 |