Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101938 | medium | 6.5 | No | An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series al... | 2026-10-15 |
| CVE-2026-101937 | medium | 6.5 | No | A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker... | 2026-10-15 |
| CVE-2026-101936 | medium | 6.5 | No | A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to... | 2026-10-15 |
| CVE-2026-101934 | medium | 4.4 | No | An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial o... | 2026-10-15 |
| CVE-2026-70242 | critical | 9.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70256 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70257 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97020 | medium | 6.4 | No | The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions up to, and inc... | 2026-10-15 |
| CVE-2026-95807 | medium | 6.4 | No | The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to,... | 2026-10-15 |
| CVE-2026-97032 | high | 7.5 | No | HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies... | 2026-10-15 |
| CVE-2026-97030 | medium | 6.1 | No | A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped... | 2026-10-15 |
| CVE-2026-94448 | medium | 6.1 | No | When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new e... | 2026-10-15 |
| CVE-2026-94447 | high | 7.8 | No | Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a maliciou... | 2026-10-15 |
| CVE-2026-94444 | high | 7.8 | No | Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY th... | 2026-10-15 |
| CVE-2026-92160 | medium | 6.5 | No | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0,... | 2026-10-15 |
| CVE-2026-92155 | high | 7.5 | No | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0,... | 2026-10-15 |
| CVE-2026-92153 | high | 7.1 | No | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0,... | 2026-10-15 |
| CVE-2026-91882 | high | 8.6 | No | Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible Fil... | 2026-10-15 |
| CVE-2026-92922 | high | 8.1 | No | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject... | 2026-10-15 |
| CVE-2026-77460 | medium | 6.5 | No | EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-ema... | 2026-10-15 |