Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102064 | high | 7.5 | No | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacke... | 2026-10-16 |
| CVE-2026-102016 | high | 7.5 | No | An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved all... | 2026-10-16 |
| CVE-2026-102012 | high | 7.5 | No | A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to... | 2026-10-16 |
| CVE-2026-101994 | high | 7.1 | No | An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolv... | 2026-10-16 |
| CVE-2026-101968 | medium | 5.4 | No | An Integer Underflow (Wrap or Wraparound) vulnerability in the rpd process of Juniper Networks Junos OS on EX Series and MX Series, and Juno... | 2026-10-16 |
| CVE-2026-101946 | low | 3.5 | No | An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege at... | 2026-10-16 |
| CVE-2026-101945 | high | 7.5 | No | An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacke... | 2026-10-16 |
| CVE-2026-101944 | high | 7.5 | No | An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allow... | 2026-10-16 |
| CVE-2026-101939 | high | 7.5 | No | A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a con... | 2026-10-16 |
| CVE-2026-67406 | medium | 6.5 | No | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the... | 2026-10-16 |
| CVE-2013-10076 | high | 7.5 | No | ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend(... | 2026-10-16 |
| CVE-2026-67407 | high | 7.1 | No | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incomplete fix for CVE-2026-44838: esc... | 2026-10-16 |
| CVE-2026-96248 | high | 7.5 | No | Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network. | 2026-10-16 |
| CVE-2026-96249 | high | 7.8 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-67413 | medium | 6.5 | No | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmq_jms_topic_exchange pl... | 2026-10-16 |
| CVE-2026-106030 | not reported | — | No | NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pip... | 2026-10-16 |
| CVE-2026-92707 | medium | 5.3 | No | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as Sys... | 2026-10-16 |
| CVE-2026-63430 | not reported | — | No | ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow th... | 2026-10-16 |
| CVE-2026-47218 | not reported | — | No | runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime pr... | 2026-10-16 |
| CVE-2026-104150 | not reported | — | No | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression ret... | 2026-10-16 |