Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-55159 high 8.8 No luci-app-adblock-fast a WebUI for fast, lightweight DNS-based ad-blocker for OpenWrt that works with dnsmasq, smartdns, or unbound. Prior to... 2026-09-29
CVE-2026-101093 medium 5.4 No Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups wit... 2026-09-29
CVE-2026-6928 critical 9.8 No IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program exe... 2026-09-29
CVE-2026-77258 high 7.7 No MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in s... 2026-09-29
CVE-2026-6935 high 7.8 No IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search... 2026-09-29
CVE-2026-18104 low 3.3 No IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Cod... 2026-09-29
CVE-2026-69485 high 8.8 No Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. 2026-09-29
CVE-2026-77260 high 7.5 No MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jir... 2026-09-29
CVE-2026-69516 high 7.0 No Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. 2026-09-29
CVE-2026-69530 high 8.1 No Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. 2026-09-29
CVE-2026-77255 high 8.6 No MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue... 2026-09-29
CVE-2026-69384 high 7.1 No Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally. 2026-09-29
CVE-2026-77825 medium 4.9 No IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/log... 2026-09-29
CVE-2026-13018 medium 4.3 No Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perfor... 2026-09-29
CVE-2026-11871 medium 5.3 No The Team Members WordPress plugin before 9.3 does not perform any authorization or visibility check in an unauthenticated AJAX action that r... 2026-09-29
CVE-2026-77259 high 7.7 No MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_atta... 2026-09-29
CVE-2026-77269 medium 6.5 No MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CV... 2026-09-29
CVE-2026-57222 medium 5.3 No Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.... 2026-09-29
CVE-2026-57223 high 7.0 No Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.... 2026-09-29
CVE-2026-57227 high 7.5 No Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.1... 2026-09-29