Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-57489 | high | 8.1 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployment... | 2026-10-20 |
| CVE-2026-55679 | medium | 6.5 | No | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the pre-installation web/instalador/instalador.php endpoint is reachable... | 2026-10-20 |
| CVE-2026-55385 | medium | 6.8 | No | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to... | 2026-10-20 |
| CVE-2026-54701 | not reported | — | No | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enhanced reads repositor... | 2026-10-20 |
| CVE-2026-110957 | critical | 10.0 | No | A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api... | 2026-10-20 |
| CVE-2026-110909 | medium | 5.0 | No | Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A pro... | 2026-10-20 |
| CVE-2026-110871 | medium | 6.5 | No | Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust C... | 2026-10-20 |
| CVE-2026-110866 | medium | 4.7 | No | Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user... | 2026-10-20 |
| CVE-2026-110861 | low | 3.7 | No | Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0,... | 2026-10-20 |
| CVE-2026-110856 | high | 7.5 | No | GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_... | 2026-10-20 |
| CVE-2026-110851 | not reported | — | No | n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied A... | 2026-10-20 |
| CVE-2026-110846 | not reported | — | No | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validati... | 2026-10-20 |
| CVE-2026-110841 | not reported | — | No | n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the req... | 2026-10-20 |
| CVE-2026-110698 | medium | 6.3 | No | A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercp... | 2026-10-20 |
| CVE-2026-110689 | medium | 5.3 | No | A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/ru... | 2026-10-20 |
| CVE-2026-110668 | high | 7.3 | No | A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2html.py. This manipula... | 2026-10-20 |
| CVE-2026-106701 | medium | 6.1 | No | ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue. | 2026-10-20 |
| CVE-2026-104586 | critical | 9.8 | No | AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi. | 2026-10-20 |
| CVE-2026-109430 | high | 7.5 | No | Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit... | 2026-10-20 |
| CVE-2026-104108 | high | 8.1 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise maps an au... | 2026-10-20 |