Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101168 | medium | 6.2 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 th... | 2026-10-14 |
| CVE-2026-100755 | medium | 4.6 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 th... | 2026-10-14 |
| CVE-2026-87688 | medium | 6.8 | No | An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management... | 2026-10-14 |
| CVE-2022-48522 | critical | 9.8 | No | In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalat... | 2026-10-14 |
| CVE-2026-94580 | medium | 4.5 | No | An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocad... | 2026-10-14 |
| CVE-2026-94584 | low | 2.6 | No | A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handl... | 2026-10-14 |
| CVE-2026-87660 | high | 7.1 | No | An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS ve... | 2026-10-14 |
| CVE-2026-87666 | high | 8.0 | No | An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.... | 2026-10-14 |
| CVE-2026-87667 | medium | 4.5 | No | An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d... | 2026-10-14 |
| CVE-2026-87673 | high | 7.2 | No | An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d an... | 2026-10-14 |
| CVE-2026-87674 | high | 7.8 | No | A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 throug... | 2026-10-14 |
| CVE-2026-87685 | medium | 6.8 | No | An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.... | 2026-10-14 |
| CVE-2026-87687 | high | 7.3 | No | An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authe... | 2026-10-14 |
| CVE-2025-68705 | critical | 9.8 | No | RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal... | 2026-10-14 |
| CVE-2025-65110 | critical | 9.3 | No | Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions... | 2026-10-14 |
| CVE-2025-59389 | critical | 9.8 | No | An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to... | 2026-10-14 |
| CVE-2025-15002 | critical | 9.8 | No | A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/m... | 2026-10-14 |
| CVE-2025-15696 | medium | 6.8 | No | The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the... | 2026-10-14 |
| CVE-2025-13533 | medium | 4.4 | No | The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 12.0.6... | 2026-10-14 |
| CVE-2025-15697 | high | 7.1 | No | The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly access... | 2026-10-14 |