Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106171 | medium | 6.1 | No | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, F... | 2026-10-14 |
| CVE-2026-53562 | not reported | — | No | Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 C... | 2026-10-14 |
| CVE-2026-97334 | not reported | — | No | The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade... | 2026-10-14 |
| CVE-2026-97333 | not reported | — | No | QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Upd... | 2026-10-14 |
| CVE-2026-77100 | not reported | — | No | MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance r... | 2026-10-14 |
| CVE-2026-77099 | not reported | — | No | CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVF... | 2026-10-14 |
| CVE-2026-107390 | high | 7.5 | No | music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit... | 2026-10-14 |
| CVE-2026-90530 | critical | 9.3 | No | ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lea... | 2026-10-14 |
| CVE-2026-100131 | medium | 5.5 | No | Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker coul... | 2026-10-14 |
| CVE-2026-100130 | medium | 5.5 | No | Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker coul... | 2026-10-14 |
| CVE-2026-100129 | high | 7.8 | No | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.... | 2026-10-14 |
| CVE-2026-100128 | high | 7.8 | No | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.... | 2026-10-14 |
| CVE-2026-100127 | high | 7.8 | No | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.... | 2026-10-14 |
| CVE-2026-100126 | medium | 5.5 | No | Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this... | 2026-10-14 |
| CVE-2026-103855 | medium | 5.5 | No | Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could e... | 2026-10-14 |
| CVE-2026-103854 | high | 7.8 | No | Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur... | 2026-10-14 |
| CVE-2026-103853 | medium | 5.5 | No | Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage t... | 2026-10-14 |
| CVE-2026-103848 | critical | 9.9 | No | Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner... | 2026-10-14 |
| CVE-2026-103847 | high | 8.6 | No | Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current... | 2026-10-14 |
| CVE-2026-103846 | high | 8.6 | No | Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code ex... | 2026-10-14 |