NI vulnerabilities and threats

3,387 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.3%	CVE-2026-11838Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Library Reservation System · Missing Authentication Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-11838 Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2. EPSS 0.3%Vulnerability CWE-306	CVE Database V5	2026-09-09
Critical	9.1	EPSS 0.2%	CVE-2026-16272PayTR Virtual Pos iFrame API WHMCS Module · Use of Less Trusted Source Critical9.1EPSS 0.2%2026-09-09CVE Database V5CVE-2026-16272 Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3. EPSS 0.2%Vulnerability PayTR Payment and Electronic Money Institution CWE-348	CVE Database V5	2026-09-09
Medium	6.4	EPSS 0.3%	CVE-2026-13709Graphina (WordPress plugin) · Cross-site Scripting Medium6.4EPSS 0.3%2026-09-09CVE Database V5CVE-2026-13709 The Graphina – Charts and Graphs For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting in all versions up to, and including, 3.1.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.3%Vulnerability iqonicdesign CWE-79 #ghsa-rfm5-p22v-3chj	CVE Database V5	2026-09-09
High	8.1	EPSS 0.4%	CVE-2026-87036Tanium Comply · Missing Authorization High8.1EPSS 0.4%2026-09-09CVE Database V5CVE-2026-87036 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.4%Vulnerability #ghsa-2frf-jx9j-3pc4	CVE Database V5	2026-09-09
High	7.2	EPSS 0.7%	CVE-2026-87021Tanium Comply · Template Injection High7.2EPSS 0.7%2026-09-09CVE Database V5CVE-2026-87021 Tanium addressed an unauthorized code execution vulnerability in Comply. EPSS 0.7%Vulnerability #ghsa-37q3-xf78-2773	CVE Database V5	2026-09-09
High	8.5	EPSS 0.5%	CVE-2026-87023Tanium Comply · Path Traversal High8.5EPSS 0.5%2026-09-09CVE Database V5CVE-2026-87023 Tanium addressed a path traversal vulnerability in Comply. EPSS 0.5%Vulnerability #ghsa-q293-753h-cmv4	CVE Database V5	2026-09-09
High	7.7	EPSS 0.3%	CVE-2026-87084Tanium Enforce · Server-Side Request Forgery (SSRF) High7.7EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87084 Tanium addressed a server-side request forgery vulnerability in Enforce. EPSS 0.3%Vulnerability #ghsa-vp3r-9rfc-jxq2	CVE Database V5	2026-09-09
Medium	5.4	EPSS 0.3%	CVE-2026-87048Tanium Comply · Missing Authorization Medium5.4EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87048 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-qc79-3chv-pjvq	CVE Database V5	2026-09-09
High	8.3	EPSS 0.3%	CVE-2026-87034Tanium Comply · SQL Injection High8.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87034 Tanium addressed a SQL injection vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-hcgr-wjfq-r6mp	CVE Database V5	2026-09-09
Medium	6.5	EPSS 0.3%	CVE-2026-87073Tanium Comply · Missing Authorization Medium6.5EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87073 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-jh9j-ccjj-r4xm	CVE Database V5	2026-09-09
Medium	4.3	EPSS 0.3%	CVE-2026-87032Tanium Server · Information Exposure Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87032 Tanium addressed an information disclosure vulnerability in Tanium Server. EPSS 0.3%Vulnerability #ghsa-5rmc-7g9g-gv7p	CVE Database V5	2026-09-09
High	7.1	EPSS 0.3%	CVE-2026-87072Tanium Comply · Missing Authorization High7.1EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87072 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-gpcv-hxc6-h22w	CVE Database V5	2026-09-09
Medium	4.3	EPSS 0.3%	CVE-2026-87035Tanium Comply · Information Exposure Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87035 Tanium addressed an information disclosure vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-5ghj-5rj5-22mv	CVE Database V5	2026-09-09
Medium	5.4	EPSS 0.3%	CVE-2026-87033Tanium Comply · Insecure Direct Object Reference Medium5.4EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87033 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-fmrc-xmvq-7v6q	CVE Database V5	2026-09-09
Medium	4.3	EPSS 0.3%	CVE-2026-14892Tanium Server · Incorrect Authorization Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-14892 Tanium addressed an improper access controls vulnerability in Tanium Server. EPSS 0.3%Vulnerability #ghsa-g629-hjx7-hrrr	CVE Database V5	2026-09-09
High	8.5	EPSS 0.4%	CVE-2026-87030Tanium Comply · Path Traversal High8.5EPSS 0.4%2026-09-09CVE Database V5CVE-2026-87030 Tanium addressed a path traversal vulnerability in Comply. EPSS 0.4%Vulnerability #ghsa-hg66-2gc7-f9c8	CVE Database V5	2026-09-09
Medium	4.3	EPSS 0.3%	CVE-2026-87046Tanium Comply · Incorrect Authorization Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87046 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-pq2h-cxgm-99jq	CVE Database V5	2026-09-09
Medium	5.4	EPSS 0.3%	CVE-2026-87025Tanium Comply · Insecure Direct Object Reference Medium5.4EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87025 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-v2ww-4j3v-p896	CVE Database V5	2026-09-09
High	8.1	EPSS 0.4%	CVE-2026-87075Tanium Comply · Incorrect Authorization High8.1EPSS 0.4%2026-09-09CVE Database V5CVE-2026-87075 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.4%Vulnerability #ghsa-f6vm-66c7-gx6q	CVE Database V5	2026-09-09
Medium	6.3	EPSS 0.3%	CVE-2026-87047Tanium Comply · Insecure Direct Object Reference Medium6.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87047 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-3pc6-5vx3-vf24	CVE Database V5	2026-09-09

Page 29 of 170