Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2017-5648 | critical | 9.1 | No | While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.... | 2026-10-15 |
| CVE-2026-73596 | medium | 6.5 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure De... | 2026-10-15 |
| CVE-2026-97012 | high | 8.8 | No | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97016 | critical | 9.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97749 | critical | 9.8 | No | Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-73597 | high | 8.1 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability.... | 2026-10-15 |
| CVE-2026-85974 | high | 7.4 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames... | 2026-10-15 |
| CVE-2026-85973 | high | 7.4 | No | Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-p... | 2026-10-15 |
| CVE-2026-93695 | high | 7.4 | No | In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local te... | 2026-10-15 |
| CVE-2026-93694 | medium | 4.0 | No | In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated call... | 2026-10-15 |
| CVE-2026-93693 | medium | 6.5 | No | In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsaf... | 2026-10-15 |
| CVE-2026-102849 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-102850 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-85115 | medium | 5.5 | No | A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do n... | 2026-10-15 |
| CVE-2026-72895 | high | 7.7 | No | A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC I... | 2026-10-15 |
| CVE-2026-105591 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-105592 | high | 7.5 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-105593 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-109305 | high | 8.8 | No | Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has som... | 2026-10-15 |
| CVE-2026-109300 | medium | 4.6 | No | Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-author... | 2026-10-15 |