Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-63697 | high | 7.2 | No | Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with re... | 2026-10-13 |
| CVE-2026-70414 | medium | 5.5 | No | Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker... | 2026-10-13 |
| CVE-2026-100762 | critical | 9.6 | No | Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird... | 2026-10-13 |
| CVE-2026-100763 | critical | 9.1 | No | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 2026-10-13 |
| CVE-2026-102404 | medium | 6.5 | No | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privi... | 2026-10-13 |
| CVE-2026-102406 | high | 8.8 | No | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant"... | 2026-10-13 |
| CVE-2026-102407 | medium | 5.4 | No | Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properl... | 2026-10-13 |
| CVE-2026-102408 | medium | 4.3 | No | Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Exponential Blowu... | 2026-10-13 |
| CVE-2026-71168 | high | 7.8 | No | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu... | 2026-10-13 |
| CVE-2026-102409 | medium | 6.5 | No | Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, re... | 2026-10-13 |
| CVE-2026-100764 | high | 8.8 | No | Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157... | 2026-10-13 |
| CVE-2026-100765 | high | 8.8 | No | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153... | 2026-10-13 |
| CVE-2026-106266 | medium | 6.5 | No | Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce... | 2026-10-13 |
| CVE-2026-106267 | medium | 6.5 | No | Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process... | 2026-10-13 |
| CVE-2026-106286 | medium | 6.5 | No | Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network... | 2026-10-13 |
| CVE-2022-33186 | critical | 9.8 | No | A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated a... | 2026-10-13 |
| CVE-2021-22555 | high | 7.8 | Listed | A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain pri... | 2026-10-13 |
| CVE-2026-82162 | critical | 9.8 | No | Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated... | 2026-10-13 |
| CVE-2026-86360 | critical | 9.6 | No | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu... | 2026-10-13 |
| CVE-2026-84317 | high | 8.8 | No | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security... | 2026-10-13 |