Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-76655 | high | 7.5 | No | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution | 2026-10-14 |
| CVE-2026-73798 | high | 8.2 | No | A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service. | 2026-10-14 |
| CVE-2026-73797 | medium | 5.3 | No | A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called. | 2026-10-14 |
| CVE-2026-73796 | medium | 4.4 | No | A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query. | 2026-10-14 |
| CVE-2026-73795 | medium | 6.4 | No | A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service. | 2026-10-14 |
| CVE-2026-73794 | medium | 4.6 | No | HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG) | 2026-10-14 |
| CVE-2026-73792 | low | 3.8 | No | A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow. | 2026-10-14 |
| CVE-2026-73791 | low | 2.0 | No | A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow. | 2026-10-14 |
| CVE-2026-73790 | high | 8.2 | No | A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown. | 2026-10-14 |
| CVE-2026-14909 | medium | 6.5 | No | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an a... | 2026-10-14 |
| CVE-2026-101294 | high | 8.7 | No | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote... | 2026-10-14 |
| CVE-2026-106047 | high | 7.7 | No | A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated... | 2026-10-14 |
| CVE-2026-106043 | high | 7.5 | No | A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attac... | 2026-10-14 |
| CVE-2026-106042 | critical | 9.9 | No | An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to r... | 2026-10-14 |
| CVE-2026-106035 | medium | 5.5 | No | An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated a... | 2026-10-14 |
| CVE-2026-106034 | medium | 5.0 | No | A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary... | 2026-10-14 |
| CVE-2026-108474 | critical | 9.8 | No | In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions | 2026-10-14 |
| CVE-2026-23707 | high | 7.2 | No | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet For... | 2026-10-14 |
| CVE-2026-106176 | low | 3.8 | No | A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially... | 2026-10-14 |
| CVE-2026-106172 | medium | 5.3 | No | A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSan... | 2026-10-14 |