Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108976 | high | 7.8 | No | GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list... | 2026-10-16 |
| CVE-2026-108857 | low | 3.3 | No | Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configured api_key because... | 2026-10-16 |
| CVE-2026-108752 | medium | 4.2 | No | JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-se... | 2026-10-16 |
| CVE-2026-108748 | medium | 5.3 | No | Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_chat/routes endpo... | 2026-10-16 |
| CVE-2026-108597 | medium | 4.8 | No | Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary... | 2026-10-16 |
| CVE-2026-108258 | not reported | — | No | Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a clie... | 2026-10-16 |
| CVE-2026-107856 | medium | 4.5 | No | CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit applications. Prior to 3... | 2026-10-16 |
| CVE-2026-24721 | medium | 6.5 | No | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can the... | 2026-10-16 |
| CVE-2026-24722 | medium | 6.5 | No | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can the... | 2026-10-16 |
| CVE-2026-97844 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97843 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97842 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97841 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97840 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97839 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97838 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97837 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97836 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97835 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-97834 | medium | 6.5 | No | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 2026-10-16 |