Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-109449 | not reported | — | No | In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its... | 2026-10-16 |
| CVE-2026-110746 | high | 7.8 | No | A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through... | 2026-10-16 |
| CVE-2026-109413 | not reported | — | No | In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() a... | 2026-10-16 |
| CVE-2026-108082 | not reported | — | No | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19,... | 2026-10-16 |
| CVE-2026-88794 | not reported | — | No | Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file... | 2026-10-16 |
| CVE-2026-54702 | not reported | — | No | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/previe... | 2026-10-16 |
| CVE-2026-54566 | not reported | — | No | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repos... | 2026-10-16 |
| CVE-2026-85714 | critical | 9.1 | No | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated adminis... | 2026-10-16 |
| CVE-2026-54525 | high | 8.8 | No | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link ha... | 2026-10-16 |
| CVE-2026-102899 | not reported | — | No | Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an atta... | 2026-10-16 |
| CVE-2026-77371 | not reported | — | No | Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's _connect() path in redash/query_... | 2026-10-16 |
| CVE-2026-108395 | high | 7.5 | No | The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12... | 2026-10-16 |
| CVE-2026-103975 | medium | 6.5 | No | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/s... | 2026-10-16 |
| CVE-2026-67418 | not reported | — | No | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbit... | 2026-10-16 |
| CVE-2026-59951 | not reported | — | No | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.8.0 until 1.30.0 and 2.2.0, s... | 2026-10-16 |
| CVE-2026-86002 | critical | 9.0 | No | Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access... | 2026-10-16 |
| CVE-2026-77572 | low | 3.3 | No | VeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier, selected metadata IOCTL handlers in the... | 2026-10-16 |
| CVE-2026-67416 | not reported | — | No | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, the optimized AMQP 1.0 server_mode parser... | 2026-10-16 |
| CVE-2026-53615 | high | 8.0 | No | util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` co... | 2026-10-16 |
| CVE-2026-53614 | high | 7.0 | No | util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility... | 2026-10-16 |