Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-59171 | critical | 9.8 | No | Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote... | 2026-10-07 |
| CVE-2025-34277 | critical | 9.8 | No | Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerability where malformed dashboard ID values are not properly v... | 2026-10-07 |
| CVE-2025-34274 | critical | 9.8 | No | Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logsta... | 2026-10-07 |
| CVE-2025-34271 | critical | 9.8 | No | Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cluster manager component when requesting sensitive credential... | 2026-10-07 |
| CVE-2025-3356 | critical | 9.8 | No | IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attack... | 2026-10-07 |
| CVE-2026-101110 | critical | 9.8 | No | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function rea... | 2026-10-07 |
| CVE-2026-101917 | high | 7.5 | No | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT get_signing_key_from_jwt is affected because unknown ki... | 2026-10-07 |
| CVE-2026-101918 | high | 7.5 | No | PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.get_signing_key_from_jwt is affec... | 2026-10-07 |
| CVE-2026-102265 | medium | 5.3 | No | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS._load in jwt/api_jws.py is affected because pa... | 2026-10-07 |
| CVE-2026-102266 | critical | 9.1 | No | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.from_jwk is affected because PyJWK ver... | 2026-10-07 |
| CVE-2026-106217 | medium | 4.3 | No | Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proc... | 2026-10-07 |
| CVE-2026-106215 | medium | 4.7 | No | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the s... | 2026-10-07 |
| CVE-2026-102267 | critical | 9.1 | No | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations a... | 2026-10-07 |
| CVE-2026-102268 | critical | 9.1 | No | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected because is_pem_form... | 2026-10-07 |
| CVE-2026-106214 | medium | 5.3 | No | Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information... | 2026-10-07 |
| CVE-2026-80048 | medium | 5.5 | No | A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sen... | 2026-10-07 |
| CVE-2026-76749 | medium | 6.5 | No | A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to... | 2026-10-07 |
| CVE-2026-76747 | critical | 9.1 | No | Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote atta... | 2026-10-07 |
| CVE-2026-76746 | critical | 9.3 | No | An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker t... | 2026-10-07 |
| CVE-2026-42708 | high | 7.6 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author wp-post-autho... | 2026-10-07 |