Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100138 | high | 7.5 | No | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.... | 2026-10-14 |
| CVE-2026-100139 | high | 7.5 | No | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.... | 2026-10-14 |
| CVE-2026-103820 | medium | 5.5 | No | CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that c... | 2026-10-14 |
| CVE-2026-105902 | high | 7.5 | No | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.... | 2026-10-14 |
| CVE-2026-106340 | medium | 4.6 | No | Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensiti... | 2026-10-14 |
| CVE-2026-105083 | medium | 4.2 | No | ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rule... | 2026-10-14 |
| CVE-2026-106627 | high | 7.5 | No | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.... | 2026-10-14 |
| CVE-2026-103296 | high | 7.5 | No | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security fea... | 2026-10-14 |
| CVE-2026-106341 | high | 8.8 | No | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sand... | 2026-10-14 |
| CVE-2026-102426 | medium | 6.1 | No | Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider mi... | 2026-10-14 |
| CVE-2026-106342 | high | 8.8 | No | Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted... | 2026-10-14 |
| CVE-2026-106343 | medium | 5.4 | No | Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI element... | 2026-10-14 |
| CVE-2026-102428 | critical | 9.8 | No | Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user prov... | 2026-10-14 |
| CVE-2026-106344 | medium | 5.4 | No | Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proc... | 2026-10-14 |
| CVE-2026-106345 | medium | 4.2 | No | Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce... | 2026-10-14 |
| CVE-2026-87428 | high | 7.8 | No | In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extr... | 2026-10-14 |
| CVE-2026-106346 | high | 8.8 | No | Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cod... | 2026-10-14 |
| CVE-2026-102775 | high | 7.5 | No | Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart... | 2026-10-14 |
| CVE-2026-106347 | high | 8.8 | No | Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-10-14 |
| CVE-2026-106348 | medium | 6.5 | No | Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted... | 2026-10-14 |