Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-14888 | critical | 9.8 | No | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could all... | 2026-10-14 |
| CVE-2026-88204 | high | 7.3 | No | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized att... | 2026-10-14 |
| CVE-2026-14988 | critical | 9.8 | No | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulner... | 2026-10-14 |
| CVE-2026-14992 | critical | 9.8 | No | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerabl... | 2026-10-14 |
| CVE-2026-102865 | medium | 6.5 | No | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 2026-10-14 |
| CVE-2026-102864 | medium | 4.6 | No | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized att... | 2026-10-14 |
| CVE-2026-102863 | high | 8.8 | No | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges... | 2026-10-14 |
| CVE-2026-102862 | high | 8.8 | No | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 2026-10-14 |
| CVE-2026-102861 | high | 8.8 | No | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 2026-10-14 |
| CVE-2026-102860 | high | 8.8 | No | Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 2026-10-14 |
| CVE-2026-105720 | medium | 4.3 | No | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 2026-10-14 |
| CVE-2026-105719 | medium | 6.5 | No | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 2026-10-14 |
| CVE-2026-105713 | medium | 5.7 | No | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network... | 2026-10-14 |
| CVE-2026-105013 | high | 7.4 | No | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 2026-10-14 |
| CVE-2026-102866 | high | 8.1 | No | Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a... | 2026-10-14 |
| CVE-2026-70267 | high | 7.2 | No | Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a... | 2026-10-14 |
| CVE-2026-70266 | high | 8.8 | No | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized att... | 2026-10-14 |
| CVE-2026-70251 | high | 7.5 | No | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 2026-10-14 |
| CVE-2026-70246 | high | 8.8 | No | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 2026-10-14 |
| CVE-2026-70217 | medium | 4.9 | No | Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 2026-10-14 |