Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106507 | medium | 6.5 | No | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by t... | 2026-10-09 |
| CVE-2026-106508 | medium | 6.5 | No | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by p... | 2026-10-09 |
| CVE-2026-20542 | medium | 6.7 | No | In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious acto... | 2026-10-09 |
| CVE-2026-20541 | medium | 5.3 | No | In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has... | 2026-10-09 |
| CVE-2026-20540 | medium | 5.3 | No | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has con... | 2026-10-09 |
| CVE-2026-20539 | medium | 5.3 | No | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has con... | 2026-10-09 |
| CVE-2026-20538 | medium | 5.3 | No | In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has... | 2026-10-09 |
| CVE-2026-20544 | medium | 6.8 | No | In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an atta... | 2026-10-09 |
| CVE-2026-106509 | high | 8.8 | No | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by i... | 2026-10-09 |
| CVE-2026-96396 | medium | 4.9 | No | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when ge... | 2026-10-09 |
| CVE-2026-96395 | low | 3.6 | No | The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook t... | 2026-10-09 |
| CVE-2026-96394 | low | 2.9 | No | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pi... | 2026-10-09 |
| CVE-2026-96393 | low | 3.6 | No | The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files,... | 2026-10-09 |
| CVE-2026-92085 | medium | 5.4 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Industry and Trade Co. L... | 2026-10-09 |
| CVE-2026-7827 | high | 8.1 | No | A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c)... | 2026-10-09 |
| CVE-2026-94440 | high | 7.5 | No | Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a p... | 2026-10-09 |
| CVE-2026-94439 | high | 7.5 | No | When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server impro... | 2026-10-09 |
| CVE-2026-81829 | medium | 5.3 | No | A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load... | 2026-10-09 |
| CVE-2026-78669 | high | 7.5 | No | A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending ma... | 2026-10-09 |
| CVE-2026-78667 | high | 7.5 | No | When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excess... | 2026-10-09 |