Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-6327 | medium | 4.3 | No | IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special... | 2026-09-28 |
| CVE-2026-6718 | medium | 6.2 | No | IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files. | 2026-09-28 |
| CVE-2026-3626 | medium | 5.3 | No | IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is ret... | 2026-09-28 |
| CVE-2026-45751 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.... | 2026-09-28 |
| CVE-2026-45752 | medium | 5.9 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.... | 2026-09-28 |
| CVE-2026-45762 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.... | 2026-09-28 |
| CVE-2026-46387 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.... | 2026-09-28 |
| CVE-2026-45747 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.1... | 2026-09-28 |
| CVE-2026-45763 | medium | 5.9 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.... | 2026-09-28 |
| CVE-2026-63452 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6... | 2026-09-28 |
| CVE-2026-71418 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6... | 2026-09-28 |
| CVE-2026-71855 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.... | 2026-09-28 |
| CVE-2026-93989 | medium | 4.3 | No | vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_... | 2026-09-28 |
| CVE-2026-93436 | high | 7.5 | No | vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployme... | 2026-09-28 |
| CVE-2026-85887 | high | 7.7 | No | Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network. | 2026-09-28 |
| CVE-2026-93592 | high | 7.5 | No | vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthentic... | 2026-09-28 |
| CVE-2026-57224 | medium | 6.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6... | 2026-09-28 |
| CVE-2026-57226 | medium | 5.9 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.... | 2026-09-28 |
| CVE-2026-93840 | medium | 5.3 | No | vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in SamplingParams._validate_all... | 2026-09-28 |
| CVE-2026-93841 | medium | 5.3 | No | vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty promp... | 2026-09-28 |