Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-80357 | high | 7.0 | No | Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access... | 2026-09-28 |
| CVE-2026-101333 | low | 3.7 | No | A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The is... | 2026-09-28 |
| CVE-2026-69459 | high | 7.8 | No | Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally. | 2026-09-28 |
| CVE-2026-69460 | high | 7.1 | No | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network. | 2026-09-28 |
| CVE-2026-69462 | high | 8.0 | No | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. | 2026-09-28 |
| CVE-2026-69468 | high | 7.0 | No | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | 2026-09-28 |
| CVE-2026-69470 | high | 7.0 | No | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. | 2026-09-28 |
| CVE-2026-94609 | high | 8.8 | No | authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an account with delegated permission to manage a g... | 2026-09-28 |
| CVE-2026-95655 | high | 8.1 | No | Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated users to access arbitra... | 2026-09-28 |
| CVE-2026-94387 | medium | 5.4 | No | Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where old_value and new_value e... | 2026-09-28 |
| CVE-2026-93659 | high | 8.1 | No | Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and admin views. Unauthen... | 2026-09-28 |
| CVE-2026-91119 | medium | 6.4 | No | Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-acti... | 2026-09-28 |
| CVE-2026-79762 | medium | 5.5 | No | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix... | 2026-09-28 |
| CVE-2026-79760 | medium | 6.4 | No | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, Termix... | 2026-09-28 |
| CVE-2026-26054 | not reported | — | No | SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using... | 2026-09-28 |
| CVE-2026-19477 | high | 7.8 | No | There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in inform... | 2026-09-28 |
| CVE-2026-101071 | medium | 6.3 | No | A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /excha... | 2026-09-28 |
| CVE-2026-100836 | medium | 4.3 | No | Contrast through 1.20.0 contains a panic vulnerability in the transit-engine endpoint's ciphertextContainer.UnmarshalJSON function that fail... | 2026-09-28 |
| CVE-2026-100745 | medium | 6.3 | No | A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of th... | 2026-09-28 |
| CVE-2026-21098 | medium | 6.1 | No | Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC with... | 2026-09-28 |