Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-107291 | medium | 4.3 | No | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, Ope... | 2026-10-13 |
| CVE-2026-84360 | high | 8.1 | No | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSessi... | 2026-10-13 |
| CVE-2026-107293 | medium | 5.3 | No | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.4 and 2.27.1, Ope... | 2026-10-13 |
| CVE-2026-83742 | high | 8.8 | No | Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an aut... | 2026-10-13 |
| CVE-2026-84897 | medium | 5.3 | No | src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP... | 2026-10-13 |
| CVE-2026-90466 | medium | 6.5 | No | Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix ma... | 2026-10-13 |
| CVE-2026-106510 | high | 7.7 | No | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by r... | 2026-10-13 |
| CVE-2026-106556 | high | 7.7 | No | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by c... | 2026-10-13 |
| CVE-2026-106558 | high | 8.8 | No | Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node packa... | 2026-10-13 |
| CVE-2026-92414 | critical | 9.1 | No | : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticate... | 2026-10-13 |
| CVE-2026-92415 | medium | 5.3 | No | — Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV... | 2026-10-13 |
| CVE-2026-107211 | medium | 5.5 | No | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table... | 2026-10-13 |
| CVE-2026-107212 | high | 7.5 | No | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ah... | 2026-10-13 |
| CVE-2026-107213 | medium | 5.5 | No | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst b... | 2026-10-13 |
| CVE-2026-107214 | high | 7.5 | No | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch perfor... | 2026-10-13 |
| CVE-2026-107215 | high | 7.5 | No | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte s... | 2026-10-13 |
| CVE-2026-107216 | high | 7.5 | No | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls... | 2026-10-13 |
| CVE-2026-107217 | high | 7.5 | No | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 in github.com/xuri/excelize/v2... | 2026-10-13 |
| CVE-2026-107218 | medium | 5.3 | No | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested... | 2026-10-13 |
| CVE-2026-107219 | high | 7.5 | No | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an at... | 2026-10-13 |