Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-96803 | high | 7.3 | No | A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file Busine... | 2026-09-24 |
| CVE-2026-96774 | medium | 5.3 | No | A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107. This affects the function loadCfg... | 2026-09-24 |
| CVE-2026-96773 | medium | 4.3 | No | A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the fil... | 2026-09-24 |
| CVE-2026-73369 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in... | 2026-09-24 |
| CVE-2026-75728 | critical | 9.1 | No | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the co... | 2026-09-24 |
| CVE-2026-97168 | not reported | — | No | Rejected reason: it is a suggestion | 2026-09-24 |
| CVE-2026-94217 | low | 3.5 | No | A flaw was found in the User-Managed Access (UMA) implementation of Keycloak. The issue occurs in the authorization token endpoint when proc... | 2026-09-24 |
| CVE-2026-94150 | low | 2.4 | No | A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/... | 2026-09-24 |
| CVE-2026-94144 | high | 7.3 | No | A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library orm_lib/src/Criteria.cc... | 2026-09-24 |
| CVE-2026-94137 | low | 3.3 | No | A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub_180004AC0 of the file shdrv_x6... | 2026-09-24 |
| CVE-2026-94102 | medium | 4.3 | No | A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file /index.php?m=member&v=Login of the component Log... | 2026-09-24 |
| CVE-2026-78806 | medium | 5.5 | No | An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive i... | 2026-09-24 |
| CVE-2026-82011 | critical | 9.1 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | 2026-09-24 |
| CVE-2026-12370 | high | 7.6 | No | ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server... | 2026-09-24 |
| CVE-2026-92238 | critical | 9.8 | No | A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnera... | 2026-09-24 |
| CVE-2026-92239 | high | 8.1 | No | A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 1... | 2026-09-24 |
| CVE-2026-92240 | critical | 9.1 | No | A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response,... | 2026-09-24 |
| CVE-2026-91749 | critical | 9.6 | No | Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside th... | 2026-09-24 |
| CVE-2026-69279 | high | 7.0 | No | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69281 | high | 7.0 | No | Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally. | 2026-09-24 |