Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-69605 | high | 7.0 | No | Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally. | 2026-09-29 |
| CVE-2026-89099 | high | 7.5 | No | A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory wi... | 2026-09-29 |
| CVE-2026-85921 | high | 8.2 | No | Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 2026-09-29 |
| CVE-2026-93393 | high | 8.1 | No | A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A r... | 2026-09-29 |
| CVE-2026-97060 | high | 7.2 | No | X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to modify or delete user... | 2026-09-29 |
| CVE-2026-97886 | medium | 6.3 | No | A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this v... | 2026-09-29 |
| CVE-2026-84465 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when Zammad checks the digital signature on an incoming... | 2026-09-29 |
| CVE-2026-85417 | not reported | — | No | Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application... | 2026-09-29 |
| CVE-2026-18117 | medium | 5.4 | No | Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name (customAliasName) because the Edit Alias dialog... | 2026-09-29 |
| CVE-2026-84460 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, any authenticated user can call the REST endpoint for ge... | 2026-09-29 |
| CVE-2026-63207 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authenticated administrator can obtain stored int... | 2026-09-29 |
| CVE-2026-63006 | not reported | — | No | Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, attacker-controlled HTML in inbound emails or tickets co... | 2026-09-29 |
| CVE-2026-102730 | not reported | — | No | Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAN... | 2026-09-29 |
| CVE-2026-102729 | not reported | — | No | `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with... | 2026-09-29 |
| CVE-2026-102727 | not reported | — | No | FTP Passive Data Connection Not Bound to the Authenticated Control Peer | 2026-09-29 |
| CVE-2026-102726 | not reported | — | No | Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read | 2026-09-29 |
| CVE-2026-102725 | not reported | — | No | Out-of-bounds Read from Unvalidated MSRP Attribute List Length | 2026-09-29 |
| CVE-2026-102724 | not reported | — | No | NULL Pointer Dereference When Evicting the Sole MSRP Attribute | 2026-09-29 |
| CVE-2026-102723 | not reported | — | No | NULL Pointer Dereference on MSRP Attribute Table Exhaustion | 2026-09-29 |
| CVE-2026-102722 | not reported | — | No | In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only covers the parse and th... | 2026-09-29 |