Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-65172 | high | 8.6 | No | NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated re... | 2026-10-13 |
| CVE-2026-65170 | high | 8.6 | No | NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-s... | 2026-10-13 |
| CVE-2026-65164 | high | 8.1 | No | NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause... | 2026-10-13 |
| CVE-2026-65162 | critical | 10.0 | No | NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply... | 2026-10-13 |
| CVE-2026-65161 | high | 7.5 | No | NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to t... | 2026-10-13 |
| CVE-2026-65148 | high | 7.3 | No | NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability... | 2026-10-13 |
| CVE-2026-65141 | high | 7.8 | No | NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might... | 2026-10-13 |
| CVE-2026-65131 | medium | 6.0 | No | NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed ov... | 2026-10-13 |
| CVE-2026-65110 | high | 7.8 | No | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a malic... | 2026-10-13 |
| CVE-2026-65104 | high | 7.1 | No | NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used... | 2026-10-13 |
| CVE-2026-65103 | high | 8.1 | No | NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote a... | 2026-10-13 |
| CVE-2026-65101 | high | 8.6 | No | NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forger... | 2026-10-13 |
| CVE-2026-94490 | not reported | — | No | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further i... | 2026-10-13 |
| CVE-2026-94489 | not reported | — | No | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further i... | 2026-10-13 |
| CVE-2026-84321 | medium | 5.4 | No | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GenerateShortToken creates standalone short-token records without... | 2026-10-13 |
| CVE-2026-84315 | high | 8.3 | No | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, Nginx UI does not apply RequireSecureSession to multiple authenti... | 2026-10-13 |
| CVE-2026-85234 | high | 7.5 | No | A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom erro... | 2026-10-13 |
| CVE-2026-77375 | medium | 6.5 | No | SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol messa... | 2026-10-13 |
| CVE-2026-103499 | high | 7.5 | No | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow... | 2026-10-13 |
| CVE-2026-93892 | high | 8.1 | No | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to expo... | 2026-10-13 |