Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-65954 | high | 8.6 | No | PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\AbstractSniffs\AbstractAr... | 2026-10-16 |
| CVE-2026-59977 | high | 8.1 | No | ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the /delete/{id} endpoint uses HTTP GET for permanent deletion without C... | 2026-10-16 |
| CVE-2026-59976 | high | 8.1 | No | ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to c... | 2026-10-16 |
| CVE-2026-57143 | high | 8.8 | No | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-co... | 2026-10-16 |
| CVE-2026-77363 | high | 8.8 | No | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does... | 2026-10-16 |
| CVE-2026-103902 | high | 7.5 | No | Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiD... | 2026-10-16 |
| CVE-2026-108269 | not reported | — | No | Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-... | 2026-10-16 |
| CVE-2026-108268 | not reported | — | No | Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-g... | 2026-10-16 |
| CVE-2026-108267 | not reported | — | No | Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, c... | 2026-10-16 |
| CVE-2026-92705 | high | 7.8 | No | Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Aut... | 2026-10-16 |
| CVE-2026-62376 | high | 8.1 | No | Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and accoun... | 2026-10-16 |
| CVE-2026-62367 | not reported | — | No | Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provi... | 2026-10-16 |
| CVE-2026-57458 | high | 8.1 | No | Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the `oauth.authorize` permis... | 2026-10-16 |
| CVE-2026-108265 | not reported | — | No | Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA... | 2026-10-16 |
| CVE-2026-108264 | critical | 9.1 | No | Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard ste... | 2026-10-16 |
| CVE-2026-108263 | critical | 9.9 | No | Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through... | 2026-10-16 |
| CVE-2026-108261 | critical | 9.3 | No | Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview route in packages/tina... | 2026-10-16 |
| CVE-2026-108260 | high | 7.6 | No | Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdow... | 2026-10-16 |
| CVE-2026-108259 | high | 8.2 | No | Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMIT_REF, GITHUB_BRANCH... | 2026-10-16 |
| CVE-2026-107854 | medium | 5.4 | No | Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpo... | 2026-10-16 |