Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77408 | not reported | — | No | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the writeShortstr function in write.go casts the byte length of AMQP shortst... | 2026-09-23 |
| CVE-2026-77407 | not reported | — | No | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext f... | 2026-09-23 |
| CVE-2026-77406 | not reported | — | No | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.Qos in channel.go accepts negative prefetchCount and prefetchSize in... | 2026-09-23 |
| CVE-2026-77404 | not reported | — | No | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates CertFile, KeyFile, CACertFile, and ServerN... | 2026-09-23 |
| CVE-2026-77403 | not reported | — | No | RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Connection.openTune in connection.go accepts a server-advertised FrameMax be... | 2026-09-23 |
| CVE-2026-47426 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the private_key_jwt client authentication path uses Clien... | 2026-09-23 |
| CVE-2026-46623 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth2 authentication module updates an existing loca... | 2026-09-23 |
| CVE-2026-45048 | high | 8.5 | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint... | 2026-09-23 |
| CVE-2026-44203 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect authorization endpoint d... | 2026-09-23 |
| CVE-2026-86681 | high | 7.6 | No | ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-priv... | 2026-09-23 |
| CVE-2026-86679 | high | 7.1 | No | ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-pr... | 2026-09-23 |
| CVE-2026-76980 | high | 7.4 | No | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Fi... | 2026-09-23 |
| CVE-2026-76979 | high | 7.7 | No | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the R... | 2026-09-23 |
| CVE-2026-84791 | high | 7.1 | No | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability t... | 2026-09-23 |
| CVE-2026-84789 | high | 7.1 | No | ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability t... | 2026-09-23 |
| CVE-2026-15358 | high | 7.5 | No | ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal... | 2026-09-23 |
| CVE-2026-96775 | high | 8.8 | No | MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends... | 2026-09-23 |
| CVE-2026-96757 | critical | 9.8 | No | orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in generated... | 2026-09-23 |
| CVE-2026-95958 | low | 3.3 | No | A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of the file manape/pe.cpp... | 2026-09-23 |
| CVE-2026-95927 | high | 7.3 | No | A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /review... | 2026-09-23 |