Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-107279 | not reported | — | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In 3.0... | 2026-10-08 |
| CVE-2026-107232 | high | 7.5 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior... | 2026-10-08 |
| CVE-2026-107230 | high | 7.4 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2... | 2026-10-08 |
| CVE-2026-107229 | medium | 4.0 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2... | 2026-10-08 |
| CVE-2026-107228 | medium | 6.8 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2... | 2026-10-08 |
| CVE-2026-107227 | high | 7.5 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2... | 2026-10-08 |
| CVE-2026-67102 | high | 8.1 | No | HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to... | 2026-10-08 |
| CVE-2026-67103 | medium | 6.1 | No | HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject unsanitized m... | 2026-10-08 |
| CVE-2026-107382 | medium | 5.9 | No | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the z... | 2026-10-08 |
| CVE-2026-102677 | high | 8.8 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, a... | 2026-10-08 |
| CVE-2026-102826 | high | 8.1 | No | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript... | 2026-10-08 |
| CVE-2026-40804 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC aBlocks ablocks allows Ref... | 2026-10-08 |
| CVE-2026-107322 | high | 7.8 | No | An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenti... | 2026-10-08 |
| CVE-2026-102827 | critical | 9.8 | No | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript... | 2026-10-08 |
| CVE-2026-91844 | high | 7.3 | No | Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Us... | 2026-10-08 |
| CVE-2026-89290 | low | 3.5 | No | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Tra... | 2026-10-08 |
| CVE-2026-19218 | critical | 9.1 | No | Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. My... | 2026-10-08 |
| CVE-2026-92555 | critical | 9.8 | No | Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT... | 2026-10-08 |
| CVE-2026-19083 | high | 8.8 | No | Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud... | 2026-10-08 |
| CVE-2026-103663 | not reported | — | No | Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` fun... | 2026-10-08 |