Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113400 | medium | 5.4 | No | Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | 2026-10-20 |
| CVE-2026-110725 | low | 3.7 | No | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4... | 2026-10-20 |
| CVE-2026-112991 | not reported | — | No | The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL v... | 2026-10-20 |
| CVE-2026-112368 | high | 7.5 | No | An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply cr... | 2026-10-20 |
| CVE-2026-110306 | medium | 6.1 | No | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4... | 2026-10-20 |
| CVE-2026-109831 | medium | 5.4 | No | UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-se... | 2026-10-20 |
| CVE-2026-107571 | high | 7.8 | No | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user... | 2026-10-20 |
| CVE-2026-107188 | critical | 9.6 | No | A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the fil... | 2026-10-20 |
| CVE-2026-107187 | high | 8.5 | No | A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authent... | 2026-10-20 |
| CVE-2026-107186 | high | 8.6 | No | An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run work... | 2026-10-20 |
| CVE-2026-107569 | high | 7.5 | No | Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop t... | 2026-10-20 |
| CVE-2026-107568 | medium | 6.5 | No | Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6) of Progressi... | 2026-10-20 |
| CVE-2026-107567 | high | 7.5 | No | Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attack... | 2026-10-20 |
| CVE-2026-107566 | medium | 6.5 | No | Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0 through 6.3.... | 2026-10-20 |
| CVE-2026-105941 | high | 8.1 | No | The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation,... | 2026-10-20 |
| CVE-2026-105299 | high | 8.7 | No | Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and w... | 2026-10-20 |
| CVE-2026-105298 | not reported | — | No | Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filter... | 2026-10-20 |
| CVE-2026-105815 | not reported | — | No | TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The e... | 2026-10-20 |
| CVE-2026-105814 | not reported | — | No | TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protect... | 2026-10-20 |
| CVE-2026-105810 | not reported | — | No | Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated at... | 2026-10-20 |