Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-63419 | high | 7.8 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-87748 | high | 8.8 | No | Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela... | 2026-09-29 |
| CVE-2026-63420 | medium | 5.5 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-63422 | high | 7.8 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-63635 | medium | 5.5 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-63638 | high | 8.3 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-65969 | medium | 5.5 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-65970 | medium | 5.3 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-67549 | high | 7.6 | No | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3... | 2026-09-29 |
| CVE-2026-69611 | high | 7.0 | No | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 2026-09-29 |
| CVE-2026-69865 | critical | 10.0 | No | Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over... | 2026-09-29 |
| CVE-2026-87701 | critical | 9.6 | No | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized a... | 2026-09-29 |
| CVE-2026-65127 | medium | 4.9 | No | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information d... | 2026-09-29 |
| CVE-2026-65121 | critical | 9.8 | No | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A succes... | 2026-09-29 |
| CVE-2026-65118 | critical | 9.8 | No | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A success... | 2026-09-29 |
| CVE-2026-65114 | critical | 9.8 | No | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical func... | 2026-09-29 |
| CVE-2026-65129 | high | 8.3 | No | NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A success... | 2026-09-29 |
| CVE-2026-63493 | high | 8.1 | No | Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with self.api permission... | 2026-09-29 |
| CVE-2026-88060 | medium | 6.1 | No | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to... | 2026-09-29 |
| CVE-2026-94396 | medium | 6.5 | No | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) | 2026-09-29 |