Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-6558 | high | 8.8 | Listed | Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentiall... | 2026-10-01 |
| CVE-2026-94684 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive detection. | 2026-10-01 |
| CVE-2026-93464 | medium | 5.4 | No | A stored cross-site scripting vulnerability via custom content descriptions exists in baserCMS. If this vulnerability is exploited, an arbit... | 2026-10-01 |
| CVE-2026-93462 | medium | 5.3 | No | A missing authentication for critical function vulnerability exists in baserCMS. If this vulnerability is exploited, a remote attacker may o... | 2026-10-01 |
| CVE-2026-93460 | medium | 5.4 | No | A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited... | 2026-10-01 |
| CVE-2026-84063 | medium | 6.5 | No | BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited,... | 2026-10-01 |
| CVE-2026-84062 | medium | 4.3 | No | BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlled key. If this vulnerability is exploited... | 2026-10-01 |
| CVE-2026-95327 | medium | 6.5 | No | Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted... | 2026-10-01 |
| CVE-2026-89032 | high | 7.7 | No | BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated u... | 2026-10-01 |
| CVE-2026-81433 | not reported | — | No | A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attac... | 2026-10-01 |
| CVE-2026-76732 | medium | 6.4 | No | A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation... | 2026-10-01 |
| CVE-2026-76729 | medium | 6.6 | No | A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high pr... | 2026-10-01 |
| CVE-2026-76727 | high | 7.2 | No | Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote atta... | 2026-10-01 |
| CVE-2026-76726 | high | 8.1 | No | An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to by... | 2026-10-01 |
| CVE-2026-76725 | critical | 9.6 | No | A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent a... | 2026-10-01 |
| CVE-2026-76724 | critical | 9.6 | No | A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent a... | 2026-10-01 |
| CVE-2026-76723 | critical | 9.6 | No | Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacen... | 2026-10-01 |
| CVE-2026-76722 | critical | 9.8 | No | Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthentica... | 2026-10-01 |
| CVE-2026-47601 | high | 7.8 | No | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unpri... | 2026-10-01 |
| CVE-2026-47600 | high | 7.8 | No | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate... | 2026-10-01 |