Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102464 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttCl... | 2026-10-20 |
| CVE-2026-102466 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client... | 2026-10-20 |
| CVE-2026-102469 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) co... | 2026-10-20 |
| CVE-2026-113506 | critical | 9.9 | No | A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of... | 2026-10-20 |
| CVE-2026-112836 | high | 8.8 | No | Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request Forgery.This issue affects VikRe... | 2026-10-20 |
| CVE-2026-112824 | medium | 5.3 | No | Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation all... | 2026-10-20 |
| CVE-2026-109700 | medium | 6.5 | No | Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configur... | 2026-10-20 |
| CVE-2026-113466 | medium | 5.3 | No | A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/S... | 2026-10-20 |
| CVE-2026-113397 | high | 7.4 | No | A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the... | 2026-10-20 |
| CVE-2026-112833 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Castos Seriously Simple Podcasting ser... | 2026-10-20 |
| CVE-2026-113396 | high | 7.4 | No | A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file /cg... | 2026-10-20 |
| CVE-2026-113395 | high | 7.4 | No | A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /... | 2026-10-20 |
| CVE-2026-113393 | medium | 6.3 | No | A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/m... | 2026-10-20 |
| CVE-2026-113392 | high | 7.4 | No | A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunct... | 2026-10-20 |
| CVE-2026-113391 | critical | 9.9 | No | A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfu... | 2026-10-20 |
| CVE-2026-113389 | critical | 9.9 | No | A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the fil... | 2026-10-20 |
| CVE-2026-113388 | medium | 4.3 | No | A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/adminis... | 2026-10-20 |
| CVE-2026-113385 | medium | 5.3 | No | A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the fi... | 2026-10-20 |
| CVE-2026-113383 | medium | 4.3 | No | A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pages/public/Login. Per... | 2026-10-20 |
| CVE-2026-113382 | medium | 6.3 | No | A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of th... | 2026-10-20 |