Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106164 | high | 7.3 | No | In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists whe... | 2026-10-08 |
| CVE-2026-106067 | medium | 6.3 | No | A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflow... | 2026-10-08 |
| CVE-2026-106066 | medium | 6.3 | No | A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overf... | 2026-10-08 |
| CVE-2026-106065 | medium | 6.3 | No | A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation use... | 2026-10-08 |
| CVE-2026-107300 | high | 7.5 | No | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for ea... | 2026-10-08 |
| CVE-2026-107297 | medium | 5.9 | No | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder reparses an incomplete array or m... | 2026-10-08 |
| CVE-2026-105570 | not reported | — | No | Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while... | 2026-10-08 |
| CVE-2026-105452 | not reported | — | No | Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alte... | 2026-10-08 |
| CVE-2026-101998 | not reported | — | No | Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together wi... | 2026-10-08 |
| CVE-2026-92543 | not reported | — | No | Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/... | 2026-10-08 |
| CVE-2026-92542 | not reported | — | No | The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and... | 2026-10-08 |
| CVE-2026-26950 | high | 8.8 | No | Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privilege... | 2026-10-08 |
| CVE-2026-54471 | medium | 6.5 | No | Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A... | 2026-10-08 |
| CVE-2026-67100 | critical | 9.8 | No | HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an... | 2026-10-08 |
| CVE-2026-67101 | medium | 5.8 | No | HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could all... | 2026-10-08 |
| CVE-2026-107285 | medium | 5.9 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior... | 2026-10-08 |
| CVE-2026-107284 | low | 3.7 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior... | 2026-10-08 |
| CVE-2026-107283 | low | 3.7 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior... | 2026-10-08 |
| CVE-2026-107281 | not reported | — | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior... | 2026-10-08 |
| CVE-2026-107280 | not reported | — | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior... | 2026-10-08 |