Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-1168 | high | 7.5 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2... | 2026-09-28 |
| CVE-2026-3855 | medium | 6.8 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2... | 2026-09-28 |
| CVE-2026-81885 | medium | 5.5 | No | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser wa... | 2026-09-28 |
| CVE-2026-78252 | medium | 6.1 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 th... | 2026-09-28 |
| CVE-2026-81886 | medium | 5.5 | No | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 par... | 2026-09-28 |
| CVE-2026-77253 | high | 7.1 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence at... | 2026-09-28 |
| CVE-2026-81884 | low | 3.3 | No | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_IN_CODE parser was v... | 2026-09-28 |
| CVE-2026-77254 | critical | 9.1 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, requests to the HTTP M... | 2026-09-28 |
| CVE-2026-81883 | low | 3.3 | No | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser wa... | 2026-09-28 |
| CVE-2026-77256 | medium | 6.5 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the plaintext OAuth fa... | 2026-09-28 |
| CVE-2026-78428 | not reported | — | No | For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authentica... | 2026-09-28 |
| CVE-2026-78427 | not reported | — | No | The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded ser... | 2026-09-28 |
| CVE-2026-78426 | not reported | — | No | The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that ha... | 2026-09-28 |
| CVE-2026-78425 | not reported | — | No | Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticketing system, an expe... | 2026-09-28 |
| CVE-2026-101066 | high | 7.3 | No | A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controlle... | 2026-09-28 |
| CVE-2026-101052 | high | 7.3 | No | A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/sr... | 2026-09-28 |
| CVE-2026-76433 | medium | 5.3 | No | A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker t... | 2026-09-28 |
| CVE-2026-76432 | medium | 4.9 | No | A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with admi... | 2026-09-28 |
| CVE-2026-76431 | medium | 4.9 | No | A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenti... | 2026-09-28 |
| CVE-2026-76434 | medium | 4.9 | No | A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an... | 2026-09-28 |