Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-93744 | medium | 6.5 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. B... | 2026-10-21 |
| CVE-2026-93442 | high | 8.2 | No | IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a... | 2026-10-21 |
| CVE-2026-87800 | medium | 6.8 | No | IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a fi... | 2026-10-21 |
| CVE-2026-114245 | high | 7.3 | No | A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a49... | 2026-10-21 |
| CVE-2026-114105 | medium | 6.2 | No | Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows attackers to set setuid, setgid, or sticky bits o... | 2026-10-21 |
| CVE-2026-114095 | medium | 6.5 | No | Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows attackers to cause infinite recursion via... | 2026-10-21 |
| CVE-2026-114085 | high | 7.9 | No | Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows workloads to manipul... | 2026-10-21 |
| CVE-2026-114080 | medium | 5.0 | No | Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project members to make the se... | 2026-10-21 |
| CVE-2026-114075 | medium | 5.4 | No | Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted user-actor tokens to c... | 2026-10-21 |
| CVE-2026-114070 | low | 3.5 | No | Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that stores a delegated u... | 2026-10-21 |
| CVE-2026-114039 | medium | 6.3 | No | A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli_query of the file re... | 2026-10-21 |
| CVE-2026-114065 | medium | 6.5 | No | Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows authenticated users to read other tenants' data by usi... | 2026-10-21 |
| CVE-2026-113802 | critical | 9.8 | No | Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos b... | 2026-10-21 |
| CVE-2026-113740 | medium | 6.3 | No | A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the fil... | 2026-10-21 |
| CVE-2026-113735 | low | 3.7 | No | A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file... | 2026-10-21 |
| CVE-2026-113710 | medium | 5.9 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change endpoint verifies the c... | 2026-10-21 |
| CVE-2026-113704 | high | 7.3 | No | A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/push... | 2026-10-21 |
| CVE-2026-113709 | critical | 9.9 | No | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an ope... | 2026-10-21 |
| CVE-2026-113670 | not reported | — | No | Rejected reason: This CVE is a duplicate of another CVE. | 2026-10-21 |
| CVE-2026-113667 | not reported | — | No | ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of... | 2026-10-21 |