Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-76274 | medium | 6.5 | No | In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could redire... | 2026-10-14 |
| CVE-2026-76275 | medium | 4.3 | No | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could... | 2026-10-14 |
| CVE-2026-76276 | medium | 4.3 | No | In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk role... | 2026-10-14 |
| CVE-2026-76277 | medium | 4.1 | No | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create... | 2026-10-14 |
| CVE-2026-76278 | medium | 4.3 | No | In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the edit_spl2_module_permissions capability c... | 2026-10-14 |
| CVE-2026-76279 | medium | 4.3 | No | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use... | 2026-10-14 |
| CVE-2026-76280 | medium | 6.3 | No | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.7... | 2026-10-14 |
| CVE-2026-85960 | high | 7.5 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote... | 2026-10-14 |
| CVE-2026-85956 | critical | 9.6 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-admini... | 2026-10-14 |
| CVE-2026-85955 | critical | 9.9 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to... | 2026-10-14 |
| CVE-2026-85954 | high | 8.6 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certai... | 2026-10-14 |
| CVE-2026-85950 | high | 8.4 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remot... | 2026-10-14 |
| CVE-2026-85948 | critical | 9.9 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Manag... | 2026-10-14 |
| CVE-2026-85947 | critical | 9.9 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-manage... | 2026-10-14 |
| CVE-2026-106625 | high | 7.8 | No | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cur... | 2026-10-14 |
| CVE-2021-20232 | critical | 9.8 | No | A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other... | 2026-10-14 |
| CVE-2021-20231 | critical | 9.8 | No | A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequence... | 2026-10-14 |
| CVE-2021-3520 | critical | 9.8 | No | There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow,... | 2026-10-14 |
| CVE-2021-3177 | critical | 9.8 | No | Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Pyth... | 2026-10-14 |
| CVE-2020-35527 | critical | 9.8 | No | In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. | 2026-10-14 |