Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112031 | low | 3.5 | No | A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the fi... | 2026-10-19 |
| CVE-2026-112028 | medium | 6.5 | No | A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this i... | 2026-10-19 |
| CVE-2026-112027 | medium | 5.3 | No | A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by... | 2026-10-19 |
| CVE-2026-111993 | low | 3.3 | No | A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of... | 2026-10-19 |
| CVE-2026-111992 | medium | 6.3 | No | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects... | 2026-10-19 |
| CVE-2026-112002 | medium | 6.8 | No | ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::update() that lets sessions of So... | 2026-10-19 |
| CVE-2026-111988 | medium | 4.3 | No | A security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affected by this issue is some unknown functionality of the component OAut... | 2026-10-19 |
| CVE-2026-111987 | medium | 4.3 | No | A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_met... | 2026-10-19 |
| CVE-2026-111984 | medium | 4.3 | No | A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file... | 2026-10-19 |
| CVE-2026-111907 | high | 7.1 | No | phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which execu... | 2026-10-19 |
| CVE-2026-111902 | medium | 5.3 | No | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that treats a missing FAQ... | 2026-10-19 |
| CVE-2026-111896 | medium | 5.4 | No | phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows FAQ editors to... | 2026-10-19 |
| CVE-2026-111891 | medium | 5.5 | No | phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission API, whose updatePermiss... | 2026-10-19 |
| CVE-2026-111845 | medium | 5.3 | No | Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly... | 2026-10-19 |
| CVE-2026-111875 | medium | 4.7 | No | A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the fil... | 2026-10-19 |
| CVE-2026-111871 | high | 7.3 | No | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted elem... | 2026-10-19 |
| CVE-2026-111866 | high | 7.3 | No | A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cach... | 2026-10-19 |
| CVE-2026-111406 | critical | 9.9 | No | Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps all... | 2026-10-19 |
| CVE-2026-111053 | not reported | — | No | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated api/guest/system/template_... | 2026-10-19 |
| CVE-2026-111046 | not reported | — | No | FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive no... | 2026-10-19 |