Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-15814 | medium | 6.5 | No | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit the amount of memory allocated w... | 2026-10-07 |
| CVE-2026-42532 | medium | 5.5 | No | A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version(s): dev (commit 38b21f78)). A speci... | 2026-10-07 |
| CVE-2026-41958 | medium | 6.5 | No | A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)).... | 2026-10-07 |
| CVE-2026-18131 | medium | 6.1 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticat... | 2026-10-07 |
| CVE-2026-59347 | high | 8.1 | No | VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privi... | 2026-10-07 |
| CVE-2026-59346 | critical | 9.3 | No | VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual... | 2026-10-07 |
| CVE-2026-107183 | high | 8.1 | No | llama.cpp before b11393 contains a use-after-free and double free vulnerability in common_chat_peg_mapper::map that allows unauthenticated r... | 2026-10-07 |
| CVE-2026-18132 | medium | 6.5 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mut... | 2026-10-07 |
| CVE-2026-18133 | medium | 6.5 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path... | 2026-10-07 |
| CVE-2026-5132 | medium | 6.5 | No | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit size of unpacked SDP messages co... | 2026-10-07 |
| CVE-2026-8821 | high | 7.1 | No | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate channel member-management per... | 2026-10-07 |
| CVE-2026-18134 | high | 7.5 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext... | 2026-10-07 |
| CVE-2026-95676 | high | 7.5 | No | A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote... | 2026-10-07 |
| CVE-2026-106233 | high | 8.3 | No | Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to exec... | 2026-10-07 |
| CVE-2026-106232 | medium | 5.4 | No | UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI... | 2026-10-07 |
| CVE-2026-81164 | medium | 5.4 | No | Missing Authorization vulnerability in Drupal Entity PDF allows Forceful Browsing. This issue affects Entity PDF versions: from 0.0.0 to 2.1... | 2026-10-07 |
| CVE-2026-92533 | not reported | — | No | Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly va... | 2026-10-07 |
| CVE-2026-92531 | not reported | — | No | Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value... | 2026-10-07 |
| CVE-2026-89417 | high | 7.2 | No | The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 's' Search... | 2026-10-07 |
| CVE-2026-87114 | high | 7.1 | No | A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container imag... | 2026-10-07 |