Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-88099 | medium | 5.9 | No | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. | 2026-10-16 |
| CVE-2026-88100 | high | 7.8 | No | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-88102 | critical | 9.8 | No | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-96320 | critical | 9.8 | No | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-69227 | critical | 9.8 | No | A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This co... | 2026-10-16 |
| CVE-2026-69226 | medium | 6.5 | No | A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account... | 2026-10-16 |
| CVE-2026-67420 | medium | 6.5 | No | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ OAuth credential refres... | 2026-10-16 |
| CVE-2026-17525 | medium | 5.2 | No | Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5. | 2026-10-16 |
| CVE-2026-106496 | medium | 6.5 | No | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by... | 2026-10-16 |
| CVE-2026-106497 | medium | 4.3 | No | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by... | 2026-10-16 |
| CVE-2026-106498 | high | 7.7 | No | Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-... | 2026-10-16 |
| CVE-2026-15575 | medium | 5.3 | No | Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Co... | 2026-10-16 |
| CVE-2026-15219 | medium | 6.5 | No | Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Id... | 2026-10-16 |
| CVE-2026-14177 | high | 7.5 | No | Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting. This issu... | 2026-10-16 |
| CVE-2026-63618 | high | 7.5 | No | Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in Apache Kylin. This issue affe... | 2026-10-16 |
| CVE-2026-96806 | medium | 5.8 | No | The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but `KeycloakJWTMi... | 2026-10-16 |
| CVE-2026-94135 | medium | 4.3 | No | The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH host-key verificatio... | 2026-10-16 |
| CVE-2026-94134 | critical | 9.1 | No | The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` i... | 2026-10-16 |
| CVE-2026-92228 | medium | 6.5 | No | The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to au... | 2026-10-16 |
| CVE-2026-110310 | medium | 5.3 | No | A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an ob... | 2026-10-16 |