Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81875 | high | 7.5 | No | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser... | 2026-09-30 |
| CVE-2026-63126 | high | 7.5 | No | Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not... | 2026-09-30 |
| CVE-2026-59823 | not reported | — | No | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller... | 2026-09-30 |
| CVE-2026-59974 | high | 7.8 | No | Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0,... | 2026-09-30 |
| CVE-2026-59944 | medium | 6.1 | No | Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised depende... | 2026-09-30 |
| CVE-2026-84997 | high | 7.5 | No | react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 0.6.0 until 1.11.1, React\Http\Io\ChunkedD... | 2026-09-30 |
| CVE-2026-77401 | medium | 6.8 | No | Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create an... | 2026-09-30 |
| CVE-2026-76821 | not reported | — | No | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion... | 2026-09-30 |
| CVE-2026-76820 | high | 7.7 | No | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFe... | 2026-09-30 |
| CVE-2026-55226 | medium | 5.4 | No | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and... | 2026-09-30 |
| CVE-2026-55225 | high | 8.0 | No | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and... | 2026-09-30 |
| CVE-2026-53941 | not reported | — | No | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF... | 2026-09-30 |
| CVE-2026-44300 | not reported | — | No | OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpoint in pkg/costmodel... | 2026-09-30 |
| CVE-2026-54503 | medium | 4.3 | No | plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type. Prior to 2.0.2, 3.... | 2026-09-30 |
| CVE-2026-53658 | not reported | — | No | Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetU... | 2026-09-30 |
| CVE-2026-44778 | not reported | — | No | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF... | 2026-09-30 |
| CVE-2026-55701 | not reported | — | No | The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver val... | 2026-09-30 |
| CVE-2026-59971 | critical | 10.0 | No | MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCP_TRANSP... | 2026-09-30 |
| CVE-2026-54168 | medium | 6.5 | No | Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, an... | 2026-09-30 |
| CVE-2026-54167 | high | 8.2 | No | Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, an... | 2026-09-30 |