Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-50276 | high | 7.5 | No | dd-trace-rb is Datadog's client library for Ruby. Prior to 2.32.0, W3C baggage extraction does not enforce DD_TRACE_BAGGAGE_MAX_ITEMS, which... | 2026-09-25 |
| CVE-2026-84445 | not reported | — | No | gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/trans... | 2026-09-25 |
| CVE-2026-69441 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attack... | 2026-09-25 |
| CVE-2026-69444 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | 2026-09-25 |
| CVE-2026-69445 | high | 7.8 | No | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to... | 2026-09-25 |
| CVE-2026-69447 | high | 7.8 | No | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 2026-09-25 |
| CVE-2026-69448 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorize... | 2026-09-25 |
| CVE-2026-75158 | medium | 4.3 | No | Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the... | 2026-09-25 |
| CVE-2026-86473 | critical | 9.1 | No | Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting... | 2026-09-25 |
| CVE-2026-69449 | medium | 6.7 | No | Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally. | 2026-09-25 |
| CVE-2026-25264 | high | 8.8 | No | Privilege escalation due to weak configuration during package extraction process. | 2026-09-25 |
| CVE-2026-25254 | critical | 9.8 | No | Improper authorization leads to Remote Code Execution via SocketIO interface. | 2026-09-25 |
| CVE-2026-25265 | high | 8.8 | No | Privilege escalation due to weak configuration while temporary file handling. | 2026-09-25 |
| CVE-2026-61413 | medium | 6.8 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A l... | 2026-09-25 |
| CVE-2026-71177 | medium | 5.4 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Fr... | 2026-09-25 |
| CVE-2026-73586 | medium | 6.4 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A... | 2026-09-25 |
| CVE-2026-73587 | medium | 6.8 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. A... | 2026-09-25 |
| CVE-2026-73588 | high | 7.4 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vuln... | 2026-09-25 |
| CVE-2026-73589 | medium | 6.3 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Passwor... | 2026-09-25 |
| CVE-2026-73591 | high | 7.5 | No | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Cod... | 2026-09-25 |