Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91852 | medium | 6.1 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects... | 2026-09-30 |
| CVE-2026-94053 | critical | 9.1 | No | Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apac... | 2026-09-30 |
| CVE-2026-94052 | critical | 9.1 | No | A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 byp... | 2026-09-30 |
| CVE-2026-94002 | high | 7.5 | No | Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0... | 2026-09-30 |
| CVE-2026-93996 | medium | 6.5 | No | Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD i... | 2026-09-30 |
| CVE-2026-93995 | medium | 6.5 | No | Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java libra... | 2026-09-30 |
| CVE-2026-93994 | high | 8.1 | No | Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication scheme... | 2026-09-30 |
| CVE-2026-91928 | medium | 6.1 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects... | 2026-09-30 |
| CVE-2026-103012 | not reported | — | No | Claude Code selected an API key stored by Claude Code, for example from an earlier `/login` or written directly to its configuration, ahead... | 2026-09-30 |
| CVE-2026-91999 | medium | 6.1 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects... | 2026-09-30 |
| CVE-2026-18870 | medium | 4.3 | No | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3... | 2026-09-30 |
| CVE-2026-92001 | medium | 6.1 | No | Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS. This issue affects... | 2026-09-30 |
| CVE-2026-102313 | medium | 4.7 | No | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the s... | 2026-09-30 |
| CVE-2026-102314 | medium | 5.4 | No | UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML p... | 2026-09-30 |
| CVE-2026-102316 | critical | 9.6 | No | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary... | 2026-09-30 |
| CVE-2026-102318 | medium | 4.7 | No | Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a craft... | 2026-09-30 |
| CVE-2026-19492 | low | 3.2 | No | IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerabil... | 2026-09-30 |
| CVE-2026-100840 | high | 7.8 | No | MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbit... | 2026-09-30 |
| CVE-2026-100844 | high | 7.8 | No | MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner). User-controlle... | 2026-09-30 |
| CVE-2026-93306 | high | 7.1 | No | IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is... | 2026-09-30 |