Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85438 | critical | 9.8 | No | MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where dimension, piece, and degree counts from enc... | 2026-10-14 |
| CVE-2026-85437 | critical | 9.8 | No | MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled len... | 2026-10-14 |
| CVE-2026-85436 | high | 7.5 | No | MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers... | 2026-10-14 |
| CVE-2026-85435 | critical | 9.1 | No | MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to... | 2026-10-14 |
| CVE-2026-85434 | critical | 9.1 | No | MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish... | 2026-10-14 |
| CVE-2026-74769 | medium | 6.5 | No | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privile... | 2026-10-14 |
| CVE-2026-93748 | high | 7.5 | No | http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, all... | 2026-10-14 |
| CVE-2026-93687 | high | 7.5 | No | braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deepl... | 2026-10-14 |
| CVE-2026-78501 | high | 8.6 | No | Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unaut... | 2026-10-14 |
| CVE-2026-55946 | medium | 5.9 | No | Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network. | 2026-10-14 |
| CVE-2026-103869 | medium | 6.5 | No | A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and re... | 2026-10-14 |
| CVE-2026-103868 | medium | 6.5 | No | A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused fo... | 2026-10-14 |
| CVE-2023-28531 | critical | 9.8 | No | ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected v... | 2026-10-14 |
| CVE-2023-25139 | critical | 9.8 | No | sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is... | 2026-10-14 |
| CVE-2023-23914 | critical | 9.1 | No | A cleartext transmission of sensitive information vulnerability exists in curl | 2026-10-14 |
| CVE-2023-4911 | high | 7.8 | Listed | A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This... | 2026-10-14 |
| CVE-2026-57090 | critical | 9.8 | No | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 2026-10-14 |
| CVE-2025-14199 | critical | 9.8 | No | A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d... | 2026-10-14 |
| CVE-2025-14191 | critical | 9.8 | No | A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2... | 2026-10-14 |
| CVE-2026-72923 | high | 7.5 | No | The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON a... | 2026-10-14 |