Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102023 | high | 7.5 | No | A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a den... | 2026-10-16 |
| CVE-2026-102022 | high | 7.5 | No | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacke... | 2026-10-16 |
| CVE-2026-102020 | high | 7.5 | No | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-bas... | 2026-10-16 |
| CVE-2026-107850 | medium | 4.3 | No | Contao is an Open Source CMS. From version 5.7.1 until 5.7.12, core-bundle/config/services.yaml registers the preview access voter as Contao... | 2026-10-16 |
| CVE-2026-107848 | low | 3.5 | No | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenListener validates REQUEST_TOKEN only for POST request... | 2026-10-16 |
| CVE-2026-78797 | critical | 9.8 | No | An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in tasks-lib.lua. | 2026-10-16 |
| CVE-2026-107845 | critical | 9.3 | No | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, an unauthenticated visitor can submit a comment whose email or web... | 2026-10-16 |
| CVE-2026-107844 | medium | 5.3 | No | Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled {path} parameter to the... | 2026-10-16 |
| CVE-2026-107843 | medium | 5.3 | No | Contao is an Open Source CMS. From version 4.1.0 until 5.3.50 and 5.7.12, ModuleRegistration::compile() enters its follow-up registration br... | 2026-10-16 |
| CVE-2026-107842 | medium | 5.3 | No | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, ModuleSearch can disclose protected page titles, URLs, and indexed... | 2026-10-16 |
| CVE-2026-75350 | high | 7.5 | No | EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Ge... | 2026-10-16 |
| CVE-2026-107841 | medium | 5.7 | No | pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-gu... | 2026-10-16 |
| CVE-2026-107840 | high | 7.5 | No | yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/se... | 2026-10-16 |
| CVE-2026-107839 | high | 7.5 | No | ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games.... | 2026-10-16 |
| CVE-2026-107838 | high | 7.5 | No | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 202... | 2026-10-16 |
| CVE-2026-107837 | high | 8.2 | No | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and e... | 2026-10-16 |
| CVE-2026-107836 | not reported | — | No | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and e... | 2026-10-16 |
| CVE-2026-24723 | medium | 6.5 | No | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can the... | 2026-10-16 |
| CVE-2026-78835 | critical | 9.8 | No | Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials. | 2026-10-16 |
| CVE-2026-75352 | high | 7.5 | No | OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a r... | 2026-10-16 |