Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-76705 medium 5.5 No A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allo... 2026-09-28
CVE-2026-76697 medium 6.5 No A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authentica... 2026-09-28
CVE-2026-76696 medium 6.5 No A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of servic... 2026-09-28
CVE-2026-76695 medium 6.5 No Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an u... 2026-09-28
CVE-2026-76694 medium 6.6 No A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploita... 2026-09-28
CVE-2026-76693 high 7.0 No A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service ag... 2026-09-28
CVE-2026-76692 high 7.1 No A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information... 2026-09-28
CVE-2026-76674 critical 9.8 No Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an u... 2026-09-28
CVE-2026-77271 high 8.8 No MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path def... 2026-09-28
CVE-2026-69488 high 7.0 No Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. 2026-09-28
CVE-2026-69492 high 7.0 No Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. 2026-09-28
CVE-2026-69493 critical 9.8 No Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. 2026-09-28
CVE-2026-77274 high 8.2 No MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf... 2026-09-28
CVE-2026-69494 high 8.8 No Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. 2026-09-28
CVE-2026-69495 high 8.8 No Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. 2026-09-28
CVE-2026-77270 medium 6.5 No MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira and Confluenc... 2026-09-28
CVE-2026-77248 high 8.6 No MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP tr... 2026-09-28
CVE-2026-8030 medium 4.3 No GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 th... 2026-09-28
CVE-2026-7514 medium 4.3 No GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 th... 2026-09-28
CVE-2026-79708 high 8.5 No GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that,... 2026-09-28