Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-74768 | medium | 4.1 | No | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A h... | 2026-10-14 |
| CVE-2026-73600 | high | 7.8 | No | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A hi... | 2026-10-14 |
| CVE-2026-68860 | medium | 6.8 | No | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remo... | 2026-10-14 |
| CVE-2026-85456 | medium | 5.5 | No | MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write... | 2026-10-14 |
| CVE-2026-85455 | high | 8.2 | No | MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memo... | 2026-10-14 |
| CVE-2026-85454 | medium | 6.1 | No | MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that writes a NUL terminator one by... | 2026-10-14 |
| CVE-2026-85453 | medium | 6.1 | No | MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scr... | 2026-10-14 |
| CVE-2026-85451 | high | 7.1 | No | MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded pa... | 2026-10-14 |
| CVE-2026-85450 | high | 7.5 | No | MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounded connections and th... | 2026-10-14 |
| CVE-2026-85449 | high | 7.5 | No | MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, allowing attackers to... | 2026-10-14 |
| CVE-2026-85448 | high | 7.5 | No | MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::hand... | 2026-10-14 |
| CVE-2026-85447 | high | 7.5 | No | MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or variable list limits. At... | 2026-10-14 |
| CVE-2026-85446 | high | 7.5 | No | MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger... | 2026-10-14 |
| CVE-2026-85445 | high | 7.5 | No | MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the packet count decl... | 2026-10-14 |
| CVE-2026-85444 | high | 7.5 | No | MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespa... | 2026-10-14 |
| CVE-2026-85443 | high | 7.5 | No | MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a... | 2026-10-14 |
| CVE-2026-85442 | high | 7.5 | No | MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allowing unauthenticated attac... | 2026-10-14 |
| CVE-2026-85441 | high | 7.5 | No | MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>. Unauthenticated att... | 2026-10-14 |
| CVE-2026-85440 | critical | 9.8 | No | MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote at... | 2026-10-14 |
| CVE-2026-85439 | high | 7.8 | No | MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir() function that f... | 2026-10-14 |