Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-107675 | medium | 5.9 | No | FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network at... | 2026-10-14 |
| CVE-2026-107676 | low | 3.3 | No | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three paylo... | 2026-10-14 |
| CVE-2026-107677 | medium | 4.7 | No | FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by sup... | 2026-10-14 |
| CVE-2026-107678 | medium | 4.7 | No | FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recur... | 2026-10-14 |
| CVE-2026-107695 | medium | 6.5 | No | FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service becau... | 2026-10-14 |
| CVE-2026-107696 | medium | 6.5 | No | FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects with... | 2026-10-14 |
| CVE-2026-82096 | high | 8.8 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutra... | 2026-10-14 |
| CVE-2026-82101 | critical | 9.6 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal... | 2026-10-14 |
| CVE-2026-82103 | medium | 6.5 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure o... | 2026-10-14 |
| CVE-2026-82108 | high | 8.8 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutraliza... | 2026-10-14 |
| CVE-2026-82110 | critical | 9.9 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation... | 2026-10-14 |
| CVE-2026-84418 | high | 7.4 | No | IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connec... | 2026-10-14 |
| CVE-2026-17484 | medium | 5.5 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control. | 2026-10-14 |
| CVE-2026-17487 | medium | 5.3 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the s... | 2026-10-14 |
| CVE-2026-18318 | medium | 5.3 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authenticati... | 2026-10-14 |
| CVE-2026-18343 | medium | 4.4 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization. | 2026-10-14 |
| CVE-2026-81858 | high | 8.1 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-o... | 2026-10-14 |
| CVE-2026-93886 | medium | 5.4 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user... | 2026-10-14 |
| CVE-2026-96119 | critical | 9.9 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the sy... | 2026-10-14 |
| CVE-2026-16275 | medium | 5.3 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 th... | 2026-10-14 |