Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105460 | medium | 5.5 | No | A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return... | 2026-10-15 |
| CVE-2026-109833 | medium | 5.9 | No | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the intern... | 2026-10-15 |
| CVE-2026-85471 | medium | 6.4 | No | A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to... | 2026-10-15 |
| CVE-2026-83536 | medium | 5.3 | No | A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such... | 2026-10-15 |
| CVE-2026-83535 | high | 7.4 | No | A flaw was found in openstack-network-exporter. When an operator configures user authentication but omits or misconfigures Transport Layer S... | 2026-10-15 |
| CVE-2026-109195 | low | 3.1 | No | A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauth... | 2026-10-15 |
| CVE-2026-109194 | medium | 6.4 | No | A flaw was found in Red Hat Quay. The build trigger management application programming interface (API) fails to verify whether a requested t... | 2026-10-15 |
| CVE-2026-109082 | medium | 6.8 | No | A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak.... | 2026-10-15 |
| CVE-2026-107203 | medium | 5.4 | No | An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The domain and subnet inter... | 2026-10-15 |
| CVE-2026-107193 | medium | 6.5 | No | A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the... | 2026-10-15 |
| CVE-2026-53882 | not reported | — | No | An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a rem... | 2026-10-15 |
| CVE-2026-50619 | not reported | — | No | A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the... | 2026-10-15 |
| CVE-2026-50612 | not reported | — | No | An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they... | 2026-10-15 |
| CVE-2026-47790 | not reported | — | No | A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can th... | 2026-10-15 |
| CVE-2026-47786 | not reported | — | No | An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote att... | 2026-10-15 |
| CVE-2026-41545 | not reported | — | No | A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can t... | 2026-10-15 |
| CVE-2026-41541 | not reported | — | No | An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account... | 2026-10-15 |
| CVE-2026-39997 | not reported | — | No | A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability... | 2026-10-15 |
| CVE-2026-39991 | not reported | — | No | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can... | 2026-10-15 |
| CVE-2026-39989 | not reported | — | No | A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account,... | 2026-10-15 |