← Back to the live CVE advisory feed

CVE-2026-107083: SENAYAN Library Management System (SLiMS) Bulian (slims9 bulian) 9.8.0

Severity
9.8 (CRITICAL)
Patch status
Unknown
Published
2026-10-19T17:17:00.690
Modified
2026-10-19T21:17:04.470

Why it matters

Critical vulnerability requiring immediate validation against your environment.

Recommended admin actions

  • Prioritize validation immediately due to critical CVSS severity.
  • Review logs for suspicious activity related to the affected application or component.

Technical summary

SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID.

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.

VULNERABILITY PULSE

LAST UPDATED: OCT 20, 2026 08:00 AM UTC
468 RECORDS
SECURE FEED ACTIVE
AFFECTED PRODUCT ACTION
CVE-2026-78162
Apache Camel PATCH
Reporter: SECURITY
10
CRITICAL
VIEW RECORD
CVE-2026-111057
mercury PATCH
Reporter: SECURITY-ADVISORIES
10
CRITICAL
VIEW RECORD
CVE-2026-110887
HivePress PATCH
Reporter: AUDIT
9.9
CRITICAL
VIEW RECORD
CVE-2026-111406
MapSVG PATCH
Reporter: AUDIT
9.9
CRITICAL
VIEW RECORD
CVE-2026-90910
Apache Answer PATCH
Reporter: SECURITY
9.8
CRITICAL
VIEW RECORD
CVE-2026-111058
mercury PATCH
Reporter: SECURITY-ADVISORIES
9.8
CRITICAL
VIEW RECORD
CVE-2026-107083
SENAYAN Library Management System (SLiMS) Bulian (slims9 bulian) 9.8.0
Reporter: CVE
9.8
CRITICAL
VIEW RECORD
CVE-2026-111862
Rank Math SEO PRO
Reporter: SECURITY
9.8
CRITICAL
VIEW RECORD
CVE-2026-107188
Archibus
Reporter: CVE
9.6
CRITICAL
VIEW RECORD
CVE-2026-112292
CheckCle
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-112296
FlyCms
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-109432
Camunda 7.24.0 PATCH
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-112776
Craft CMS from 5.0.0 PATCH
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-112779
grav-plugin-api PATCH
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-112780
Grav from 2.0.15 PATCH
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-109442
piflow 2.0.0
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-75128
Langchain-Chatchat
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-77932
DB-GPT
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-77933
DB-GPT
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-77936
letta
Reporter: DISCLOSURE
9.3
CRITICAL
VIEW RECORD
CVE-2026-113380
RingRTC PATCH
Reporter: CVE
9.3
CRITICAL
VIEW RECORD
CVE-2026-109437
Cognition PATCH
Reporter: DISCLOSURE
9.2
CRITICAL
VIEW RECORD
CVE-2026-112393
Pillow PATCH
Reporter: SECURITY-ADVISORIES
9.2
CRITICAL
VIEW RECORD
CVE-2026-112398
Pillow PATCH
Reporter: SECURITY-ADVISORIES
9.2
CRITICAL
VIEW RECORD
CVE-2026-112403
Pillow PATCH
Reporter: SECURITY-ADVISORIES
9.2
CRITICAL
VIEW RECORD
CVE-2026-112900
Pillow PATCH
Reporter: SECURITY-ADVISORIES
9.2
CRITICAL
VIEW RECORD
CVE-2026-112377
attested-tls-poc
Reporter: DISCLOSURE
9.1
CRITICAL
VIEW RECORD
CVE-2026-13695
Integratec
Reporter: CVE-COORDINATION
8.8
HIGH
VIEW RECORD
CVE-2026-111408
ExpressTech Quiz And Survey Master quiz-master-next
Reporter: AUDIT
8.8
HIGH
VIEW RECORD
CVE-2026-78165
Apache Camel: from 2.11.0 PATCH
Reporter: SECURITY
8.8
HIGH
VIEW RECORD
CVE-2026-83531
Apache Camel: from 4.4.0 PATCH
Reporter: SECURITY
8.8
HIGH
VIEW RECORD
CVE-2026-88900
Apache Camel: from 4.0.0 PATCH
Reporter: SECURITY
8.8
HIGH
VIEW RECORD
CVE-2026-10572
IBM
Reporter: PSIRT
8.8
HIGH
VIEW RECORD
CVE-2026-10574
IBM
Reporter: PSIRT
8.8
HIGH
VIEW RECORD
CVE-2026-10743
IBM
Reporter: PSIRT
8.8
HIGH
VIEW RECORD
CVE-2026-82166
Dell Application Store PATCH
Reporter: SECURITY_ALERT
8.8
HIGH
VIEW RECORD
CVE-2026-76788
ZEPHYRPROJECT
Reporter: VULNERABILITIES
8.8
HIGH
VIEW RECORD
CVE-2026-112404
Pillow PATCH
Reporter: SECURITY-ADVISORIES
8.8
HIGH
VIEW RECORD
CVE-2026-112896
Pillow is a Python imaging library PATCH
Reporter: SECURITY-ADVISORIES
8.8
HIGH
VIEW RECORD
CVE-2026-53995
mlflow
Reporter: DISCLOSURE
8.8
HIGH
VIEW RECORD
CVE-2026-107400
IBM TRIRIGA Application Platform 5.0.0
Reporter: PSIRT
8.8
HIGH
VIEW RECORD
CVE-2026-109126
IBM
Reporter: PSIRT
8.8
HIGH
VIEW RECORD
CVE-2026-109395
Ning compress-lzf PATCH
Reporter: DISCLOSURE
8.8
HIGH
VIEW RECORD
CVE-2026-112305
Semaphore UI
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112309
@rvf/set-get PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112366
Picomatch
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112770
Craft CMS 4.x PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112772
Craft CMS from 5.0.0 PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112773
Craft CMS from 5.0.0 PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112774
Craft CMS from 5.8.0 PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112775
Craft CMS from 5.0.0 PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112777
Craft CMS 4.x PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112781
Grav from 2.0.0 PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112782
Grav 1.7.53 PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-112397
Pillow is a Python imaging library PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-112399
Pillow PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-112400
Pillow PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-112402
Pillow is a Python imaging library PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-112405
Pillow PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-112406
Pillow PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-112892
Pillow PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-112894
Pillow PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-112895
Pillow PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-112897
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
8.7
HIGH
VIEW RECORD
CVE-2026-109443
JoySafeter
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-109444
OpenSRE
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-77926
Aix-DB 1.2.4
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-77930
EvoScientist 0.1.0 PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-77934
Coze Studio PATCH
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-77935
Coze Studio
Reporter: DISCLOSURE
8.7
HIGH
VIEW RECORD
CVE-2026-105299
Summary PATCH
Reporter: CNA
8.7
HIGH
VIEW RECORD
CVE-2026-113404
WebITR developed by Uniong
Reporter: TWCERT
8.7
HIGH
VIEW RECORD
CVE-2026-109431
Camunda 7.24.0 PATCH
Reporter: DISCLOSURE
8.6
HIGH
VIEW RECORD
CVE-2026-112306
NocoBase @nocobase/plugin-collection-sql
Reporter: DISCLOSURE
8.6
HIGH
VIEW RECORD
CVE-2026-103038
PingTools Network Utilities 4.64
Reporter: HELP
8.6
HIGH
VIEW RECORD
CVE-2026-107186
RAPID7
Reporter: CVE
8.6
HIGH
VIEW RECORD
CVE-2026-112370
Magic NX15
Reporter: CNA
8.6
HIGH
VIEW RECORD
CVE-2026-112371
Magic NX15
Reporter: CNA
8.6
HIGH
VIEW RECORD
CVE-2026-109440
LangAlpha
Reporter: DISCLOSURE
8.6
HIGH
VIEW RECORD
CVE-2026-77937
Letta
Reporter: DISCLOSURE
8.6
HIGH
VIEW RECORD
CVE-2026-97627
ADX5004
Reporter: VULTURES
8.6
HIGH
VIEW RECORD
CVE-2026-112161
MobaXterm
Reporter: CVE-COORDINATION
8.5
HIGH
VIEW RECORD
CVE-2026-112263
Television (tv) 0.15.0
Reporter: DISCLOSURE
8.5
HIGH
VIEW RECORD
CVE-2026-112264
BentoML
Reporter: DISCLOSURE
8.5
HIGH
VIEW RECORD
CVE-2026-107187
RAPID7
Reporter: CVE
8.5
HIGH
VIEW RECORD
CVE-2026-105810
Tapo C320WS v2
Reporter: F23511DB-6C3E-4E32-A477-6AA17D310630
8.5
HIGH
VIEW RECORD
CVE-2026-102438
Armoury Crate
Reporter: 54BF65A7-A193-42D2-B1BA-8E150D3C35E1
8.5
HIGH
VIEW RECORD
CVE-2026-112307
sqlparse
Reporter: DISCLOSURE
8.4
HIGH
VIEW RECORD
CVE-2026-105453
IBM Sterling Connect Direct for Unix 6.3.0.0
Reporter: PSIRT
8.4
HIGH
VIEW RECORD
CVE-2026-112265
LangBot
Reporter: DISCLOSURE
8.3
HIGH
VIEW RECORD
CVE-2026-112308
crewai-tools
Reporter: DISCLOSURE
8.3
HIGH
VIEW RECORD
CVE-2026-107366
IBM Langflow OSS 1.0.0
Reporter: PSIRT
8.3
HIGH
VIEW RECORD
CVE-2026-78164
Apache Camel: from 4.0.0 PATCH
Reporter: SECURITY
8.2
HIGH
VIEW RECORD
CVE-2026-80312
Apache Camel: from 4.11.0 PATCH
Reporter: SECURITY
8.2
HIGH
VIEW RECORD
CVE-2026-80343
Apache Camel: from 4.0.0 PATCH
Reporter: SECURITY
8.2
HIGH
VIEW RECORD
CVE-2026-80344
Apache Camel: from 4.0.0 PATCH
Reporter: SECURITY
8.2
HIGH
VIEW RECORD
CVE-2026-88901
Apache Camel: from 4.7.0 PATCH
Reporter: SECURITY
8.2
HIGH
VIEW RECORD
CVE-2026-111915
Yank Note PATCH
Reporter: DISCLOSURE
8.2
HIGH
VIEW RECORD
CVE-2026-112266
SGLang
Reporter: DISCLOSURE
8.2
HIGH
VIEW RECORD
CVE-2026-112368
MONGODB
Reporter: CNA
8.2
HIGH
VIEW RECORD

About the Vulnerability Pulse CVE Feed

The Vulnerability Pulse feed tracks live CVE advisories sourced from the National Vulnerability Database and vendor security disclosures. It is designed for SOC analysts, IT administrators, and security teams who need a fast, filterable view of current vulnerabilities without digging through raw NVD data.

How to Use the CVE Advisory Tracker

Use the severity filters to narrow results to Critical or High priority vulnerabilities. Filter by vendor to focus on software and hardware relevant to your environment. Export to CSV for reporting, ticketing, or patch prioritization workflows.

What Is a CVE Advisory?

A CVE (Common Vulnerabilities and Exposures) advisory is a public disclosure of a security vulnerability assigned a unique identifier by MITRE. Advisories include severity scores (CVSS), affected versions, and remediation guidance. Monitoring CVE advisories is a core function of vulnerability management programs and SOC operations.

CVE Analysis & Writeups

For in-depth analysis of specific vulnerabilities, visit the IT Knowledge Bases blog for CVE breakdowns, exploitation analysis, and remediation guidance written for security practitioners.