Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87677 | medium | 6.6 | No | An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thro... | 2026-10-14 |
| CVE-2026-87664 | high | 7.8 | No | A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1... | 2026-10-14 |
| CVE-2026-87663 | medium | 6.7 | No | An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versio... | 2026-10-14 |
| CVE-2026-87662 | medium | 6.7 | No | Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter str... | 2026-10-14 |
| CVE-2026-87661 | medium | 5.7 | No | Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or... | 2026-10-14 |
| CVE-2026-110150 | medium | 5.5 | No | Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive informat... | 2026-10-14 |
| CVE-2023-5649 | medium | 5.5 | No | An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated... | 2026-10-14 |
| CVE-2023-5648 | medium | 6.1 | No | In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unaut... | 2026-10-14 |
| CVE-2026-86348 | medium | 4.3 | No | Mattermost versions <=11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash... | 2026-10-14 |
| CVE-2026-5049 | medium | 5.7 | No | A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacke... | 2026-10-14 |
| CVE-2026-5048 | high | 8.0 | No | In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an auth... | 2026-10-14 |
| CVE-2026-5047 | medium | 5.7 | No | A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability... | 2026-10-14 |
| CVE-2026-97657 | critical | 9.8 | No | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable H... | 2026-10-14 |
| CVE-2026-92911 | high | 8.7 | No | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject... | 2026-10-14 |
| CVE-2026-91013 | critical | 9.3 | No | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scri... | 2026-10-14 |
| CVE-2026-78193 | high | 7.5 | No | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Identity Endpoint in all... | 2026-10-14 |
| CVE-2026-84420 | not reported | — | No | Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 26... | 2026-10-14 |
| CVE-2026-77096 | not reported | — | No | CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. U... | 2026-10-14 |
| CVE-2026-7767 | medium | 5.8 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 t... | 2026-10-14 |
| CVE-2026-77095 | not reported | — | No | CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Updat... | 2026-10-14 |