Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77094 | not reported | — | No | CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software... | 2026-10-14 |
| CVE-2026-77093 | not reported | — | No | CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all C... | 2026-10-14 |
| CVE-2026-77090 | not reported | — | No | CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolve... | 2026-10-14 |
| CVE-2026-67165 | medium | 5.4 | No | HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in... | 2026-10-14 |
| CVE-2026-53564 | not reported | — | No | Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTS... | 2026-10-14 |
| CVE-2026-53563 | not reported | — | No | Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR... | 2026-10-14 |
| CVE-2026-14532 | medium | 4.3 | No | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that c... | 2026-10-14 |
| CVE-2026-18228 | not reported | — | No | HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Up... | 2026-10-14 |
| CVE-2026-107607 | medium | 6.2 | No | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could al... | 2026-10-14 |
| CVE-2026-107606 | medium | 6.2 | No | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could al... | 2026-10-14 |
| CVE-2026-109412 | critical | 9.9 | No | An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication inf... | 2026-10-14 |
| CVE-2026-104995 | high | 8.1 | No | The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_templat... | 2026-10-14 |
| CVE-2026-104345 | high | 7.5 | No | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacke... | 2026-10-14 |
| CVE-2026-103423 | high | 7.5 | No | The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to t... | 2026-10-14 |
| CVE-2026-103297 | high | 7.5 | No | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security fea... | 2026-10-14 |
| CVE-2026-103316 | high | 7.1 | No | The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via D... | 2026-10-14 |
| CVE-2026-103549 | low | 2.7 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 th... | 2026-10-14 |
| CVE-2026-102502 | medium | 5.3 | No | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security fea... | 2026-10-14 |
| CVE-2026-102007 | high | 7.2 | No | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cro... | 2026-10-14 |
| CVE-2026-101924 | high | 7.2 | No | The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last ref... | 2026-10-14 |