Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110894 | medium | 5.3 | No | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security L... | 2026-10-22 |
| CVE-2026-110893 | medium | 5.3 | No | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security L... | 2026-10-22 |
| CVE-2026-114184 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements addon... | 2026-10-22 |
| CVE-2026-114182 | medium | 4.3 | No | Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incor... | 2026-10-22 |
| CVE-2026-114180 | medium | 5.3 | No | Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This is... | 2026-10-22 |
| CVE-2026-114177 | high | 8.8 | No | Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Request Forgery.This i... | 2026-10-22 |
| CVE-2026-114175 | medium | 5.4 | No | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control S... | 2026-10-22 |
| CVE-2026-112867 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in H5P H5P h5p allows Stored XSS.This iss... | 2026-10-22 |
| CVE-2026-112843 | medium | 4.3 | No | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Cont... | 2026-10-22 |
| CVE-2026-112826 | medium | 5.3 | No | Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Ac... | 2026-10-22 |
| CVE-2026-111847 | medium | 5.4 | No | Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorre... | 2026-10-22 |
| CVE-2026-111401 | medium | 6.5 | No | Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue... | 2026-10-22 |
| CVE-2026-98129 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() sa... | 2026-10-22 |
| CVE-2026-106488 | high | 8.1 | No | Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider pack... | 2026-10-22 |
| CVE-2026-106489 | medium | 6.5 | No | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by... | 2026-10-22 |
| CVE-2026-106490 | medium | 6.5 | No | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by... | 2026-10-22 |
| CVE-2026-76524 | high | 7.8 | No | A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low pr... | 2026-10-22 |
| CVE-2026-76505 | high | 7.5 | No | A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation... | 2026-10-22 |
| CVE-2026-76497 | medium | 6.6 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c... | 2026-10-22 |
| CVE-2026-76493 | high | 7.5 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c... | 2026-10-22 |