Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-57225 | medium | 5.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6... | 2026-09-28 |
| CVE-2026-57229 | medium | 5.3 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6... | 2026-09-28 |
| CVE-2026-63446 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6... | 2026-09-28 |
| CVE-2026-63447 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.5 until 8.0.6... | 2026-09-28 |
| CVE-2026-63448 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.... | 2026-09-28 |
| CVE-2026-63449 | medium | 5.3 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6... | 2026-09-28 |
| CVE-2026-63450 | medium | 5.3 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FT... | 2026-09-28 |
| CVE-2026-63451 | medium | 5.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6... | 2026-09-28 |
| CVE-2026-46352 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.... | 2026-09-28 |
| CVE-2026-94083 | critical | 9.4 | No | Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even th... | 2026-09-28 |
| CVE-2026-94084 | critical | 9.4 | No | Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with... | 2026-09-28 |
| CVE-2026-86595 | high | 8.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Iron Mountain Archiving Services Inc.... | 2026-09-28 |
| CVE-2026-86334 | medium | 4.2 | No | Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on... | 2026-09-28 |
| CVE-2026-86054 | high | 7.8 | No | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSe... | 2026-09-28 |
| CVE-2026-77605 | high | 7.8 | No | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolv... | 2026-09-28 |
| CVE-2026-57178 | high | 7.4 | No | Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the `vk-app` backend accepted VK application c... | 2026-09-28 |
| CVE-2026-15952 | medium | 6.4 | No | Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600). This issue affects... | 2026-09-28 |
| CVE-2026-100707 | high | 7.7 | No | Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources due to inconsistent... | 2026-09-28 |
| CVE-2026-100703 | high | 7.7 | No | Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environment without confining it to the policy's nam... | 2026-09-28 |
| CVE-2026-100695 | medium | 6.1 | No | Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() database result is interpolated into JavaScript... | 2026-09-28 |