Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-63162 | high | 8.8 | No | Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the in... | 2026-10-15 |
| CVE-2026-63159 | high | 7.4 | No | Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to ta... | 2026-10-15 |
| CVE-2026-63158 | high | 7.4 | No | Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcry... | 2026-10-15 |
| CVE-2026-63153 | high | 8.1 | No | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attacke... | 2026-10-15 |
| CVE-2026-105595 | high | 8.8 | No | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-74045 | high | 7.1 | No | Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bound... | 2026-10-15 |
| CVE-2026-74036 | high | 7.2 | No | Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than... | 2026-10-15 |
| CVE-2026-74034 | high | 7.5 | No | Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom comma... | 2026-10-15 |
| CVE-2026-74031 | medium | 6.5 | No | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file helpers that allows m... | 2026-10-15 |
| CVE-2026-105596 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-105597 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-105598 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-105714 | high | 7.5 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-105716 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-105717 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-94506 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |
| CVE-2026-91881 | critical | 9.0 | No | Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transpor... | 2026-10-15 |
| CVE-2026-110774 | medium | 5.3 | No | Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other use... | 2026-10-15 |
| CVE-2026-110769 | high | 8.6 | No | holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform us... | 2026-10-15 |
| CVE-2026-110764 | medium | 5.3 | No | AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allo... | 2026-10-15 |