Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High7.1Payload is a free and open source headless content management system.CVE-2026-106100 · payloadcms · payload · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 6, 2026
Critical9.2Payload is a free and open source headless content management system.CVE-2026-105863 · payloadcms · payload · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 6, 2026
Medium6.9Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4CVE-2026-102780 · joomlafry.com · TF Content for Joomla · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSSEPSS 0.3%Oct 5, 2026
Medium6.3An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determined Object Attributes, has been identified in…CVE-2025-9315 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Dec 10, 2025