Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-70202 high 7.5 No Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 2026-10-14
CVE-2026-88166 high 8.8 No Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 2026-10-14
CVE-2026-88163 high 8.8 No Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 2026-10-14
CVE-2026-88155 high 8.8 No Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 2026-10-14
CVE-2026-85932 medium 6.5 No Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker... 2026-10-14
CVE-2026-85900 high 8.8 No Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. 2026-10-14
CVE-2026-70298 medium 6.5 No Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker... 2026-10-14
CVE-2026-88209 medium 4.6 No Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized att... 2026-10-14
CVE-2026-88208 medium 4.6 No Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized att... 2026-10-14
CVE-2026-88206 high 7.5 No Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 2026-10-14
CVE-2026-88200 high 8.8 No Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 2026-10-14
CVE-2026-88198 high 8.8 No Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. 2026-10-14
CVE-2026-14999 high 7.5 No IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could all... 2026-10-14
CVE-2026-94587 medium 4.5 No A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations... 2026-10-14
CVE-2026-94586 medium 6.8 No A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operation... 2026-10-14
CVE-2026-94585 high 8.8 No An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG... 2026-10-14
CVE-2026-94581 medium 6.8 No An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thr... 2026-10-14
CVE-2026-94579 high 8.0 No An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termin... 2026-10-14
CVE-2026-94577 high 7.8 No A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric... 2026-10-14
CVE-2026-94576 high 8.0 No An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions befo... 2026-10-14