Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-63268 | not reported | — | No | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name... | 2026-10-06 |
| CVE-2026-63267 | not reported | — | No | LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while... | 2026-10-06 |
| CVE-2026-63266 | not reported | — | No | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document cou... | 2026-10-06 |
| CVE-2026-105698 | medium | 5.4 | No | Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownersh... | 2026-10-06 |
| CVE-2026-81656 | high | 8.8 | No | IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged a... | 2026-10-06 |
| CVE-2026-81626 | high | 8.6 | No | IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated u... | 2026-10-06 |
| CVE-2026-92030 | medium | 5.4 | No | Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firef... | 2026-10-06 |
| CVE-2026-92031 | medium | 6.5 | No | Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153... | 2026-10-06 |
| CVE-2026-97873 | not reported | — | No | In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ran their password-bas... | 2026-10-06 |
| CVE-2026-85515 | not reported | — | No | In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1... | 2026-10-06 |
| CVE-2026-71892 | not reported | — | No | In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTra... | 2026-10-06 |
| CVE-2026-71891 | not reported | — | No | In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugment... | 2026-10-06 |
| CVE-2026-71890 | not reported | — | No | In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list, org.bouncycastle.mls.protocol.Group.... | 2026-10-06 |
| CVE-2026-71889 | not reported | — | No | In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the lega... | 2026-10-06 |
| CVE-2026-71888 | not reported | — | No | In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fie... | 2026-10-06 |
| CVE-2026-71887 | not reported | — | No | In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding si... | 2026-10-06 |
| CVE-2026-71886 | not reported | — | No | In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or trust delegation from... | 2026-10-06 |
| CVE-2026-71885 | not reported | — | No | In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509 credential to a Lea... | 2026-10-06 |
| CVE-2026-71883 | not reported | — | No | In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the ca... | 2026-10-06 |
| CVE-2026-18040 | not reported | — | No | In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8) arithmetic used lookup tables i... | 2026-10-06 |