Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111903 | medium | 5.4 | No | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows users with FAQ_EDIT... | 2026-10-19 |
| CVE-2026-111897 | high | 7.1 | No | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage atta... | 2026-10-19 |
| CVE-2026-111892 | medium | 6.5 | No | phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/password/update and user/password/reset end... | 2026-10-19 |
| CVE-2026-111881 | high | 7.6 | No | FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_M... | 2026-10-19 |
| CVE-2026-111868 | medium | 6.3 | No | A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/ja... | 2026-10-19 |
| CVE-2026-111854 | high | 8.1 | No | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command inter... | 2026-10-19 |
| CVE-2026-108373 | medium | 6.5 | No | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.27.0, certain endpoints in the Sales Person-wi... | 2026-10-19 |
| CVE-2023-42999 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2023-42998 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2023-42997 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2023-42996 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2023-42995 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2023-42994 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2023-42993 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2023-42992 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2023-42991 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2023-42990 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-19 |
| CVE-2025-68665 | critical | 9.1 | No | LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0.3.80 and 1.1.8, and prior to langchain v... | 2026-10-19 |
| CVE-2025-15049 | critical | 9.8 | No | A vulnerability was identified in code-projects Online Farm System 1.0. Affected is an unknown function of the file /addProduct.php. The man... | 2026-10-19 |
| CVE-2025-15048 | critical | 9.8 | No | A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTT... | 2026-10-19 |