CyberStack

NIST

CVE intelligence

Cached from NVD. 2026-10-26 03:40 Perth time (AWST). Recent.

1756KEV listed
209Published, last 14 days
654Critical
981High
CVETitleVendorPublishedCVSSKEV listed
CVE-2026-108697CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to list permission-restric—2026-10-11—
CVE-2026-108696CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that allows authenticated customers to act on o—2026-10-11—
CVE-2026-108695MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketp—2026-10-11—
CVE-2026-108694ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/conve—2026-10-11—
CVE-2026-108693ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches—2026-10-11—
CVE-2026-1086921Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source dat—2026-10-11—
CVE-2026-108691mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers'—2026-10-11—
CVE-2026-108690mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other shoppers' cart items d—2026-10-11—
CVE-2026-108689Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI c—2026-10-11—
CVE-2026-108688Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privi—2026-10-11—
CVE-2026-108684A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/—2026-10-11—
CVE-2026-108683A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Me—2026-10-11—
CVE-2026-108682A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the compon—2026-10-11—
CVE-2026-108681A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/web_channel.py—2026-10-11—
CVE-2026-108584A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.gi—2026-10-11—
CVE-2026-108578A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded—2026-10-11—
CVE-2026-108577A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file —2026-10-11—
CVE-2026-108576A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostic—2026-10-11—
CVE-2026-108575A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of —2026-10-11—
CVE-2026-108574A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm—2026-10-11—
CVE-2026-108573A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer:—2026-10-11—
CVE-2026-108572A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controll—2026-10-11—
CVE-2026-108571A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file webmain/—2026-10-11—
CVE-2026-108570A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furi—2026-10-11—
CVE-2026-108569A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file fram—2026-10-11—
CVE-2026-108568A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file syste—2026-10-11—
CVE-2026-108567A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file system/fields/image.php —2026-10-11—
CVE-2026-108566A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file templates/default/contro—2026-10-11—
CVE-2026-108544A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxview—2026-10-11—
CVE-2026-108543A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgen—2026-10-11—
CVE-2026-108542A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/in—2026-10-11—
CVE-2026-108541A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstoref—2026-10-11—
CVE-2026-108540A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File —2026-10-11—
CVE-2026-108539A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the compon—2026-10-11—
CVE-2026-108538A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gf_mx_v of the file utils/os_thread.c—2026-10-11—
CVE-2026-108523A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts o—2026-10-11—
CVE-2026-108522A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Lo—2026-10-11—
CVE-2026-108521A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file bac—2026-10-11—
CVE-2026-107694The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that the vendor a commissio—2026-10-11—
CVE-2026-107507The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the low—2026-10-11—

Previous161–200 of 209Next