Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-96408 | critical | 9.4 | No | A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbit... | 2026-10-07 |
| CVE-2026-97146 | not reported | — | No | Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has... | 2026-10-07 |
| CVE-2026-92532 | not reported | — | No | Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges c... | 2026-10-07 |
| CVE-2026-92393 | not reported | — | No | Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workl... | 2026-10-07 |
| CVE-2026-79818 | medium | 5.3 | No | A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authen... | 2026-10-07 |
| CVE-2026-78243 | not reported | — | No | Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membershi... | 2026-10-07 |
| CVE-2026-79817 | medium | 5.5 | No | A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploi... | 2026-10-07 |
| CVE-2026-79816 | medium | 6.3 | No | A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a... | 2026-10-07 |
| CVE-2026-76741 | medium | 6.5 | No | Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attack... | 2026-10-07 |
| CVE-2026-43976 | high | 7.1 | No | wger is a free, open-source workout and fitness manager. Prior to version 2.6, five gym management views in wger apply a flawed gym-scope gu... | 2026-10-07 |
| CVE-2026-42714 | high | 7.6 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Piggly Dev Pix por Piggly (para Woocom... | 2026-10-07 |
| CVE-2026-18495 | medium | 6.1 | No | A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when p... | 2026-10-07 |
| CVE-2026-107177 | medium | 5.9 | No | Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt... | 2026-10-07 |
| CVE-2026-107170 | low | 2.9 | No | A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under spec... | 2026-10-07 |
| CVE-2026-107125 | medium | 6.3 | No | A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the a... | 2026-10-07 |
| CVE-2026-107159 | medium | 6.5 | No | MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData() that allows unauthenticated local... | 2026-10-07 |
| CVE-2026-106511 | critical | 9.8 | No | MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract syst... | 2026-10-07 |
| CVE-2026-105326 | low | 2.5 | No | An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription request... | 2026-10-07 |
| CVE-2026-103668 | high | 8.6 | No | An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an... | 2026-10-07 |
| CVE-2025-25249 | critical | 9.8 | Listed | A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.1... | 2026-10-07 |