Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-24075 | high | 7.0 | No | Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and ra... | 2026-09-22 |
| CVE-2026-95623 | medium | 5.6 | No | The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When... | 2026-09-22 |
| CVE-2026-88857 | not reported | — | No | Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 -... | 2026-09-22 |
| CVE-2026-88856 | not reported | — | No | Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 -... | 2026-09-22 |
| CVE-2026-88855 | not reported | — | No | Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The exte... | 2026-09-22 |
| CVE-2026-88854 | not reported | — | No | Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions sho... | 2026-09-22 |
| CVE-2026-24073 | high | 7.8 | No | Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. | 2026-09-22 |
| CVE-2026-24074 | high | 7.8 | No | Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. | 2026-09-22 |
| CVE-2026-75791 | high | 8.6 | No | Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API... | 2026-09-22 |
| CVE-2026-75878 | critical | 9.1 | No | IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper au... | 2026-09-22 |
| CVE-2026-18869 | medium | 6.4 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network service... | 2026-09-22 |
| CVE-2026-17619 | high | 8.6 | No | IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attack... | 2026-09-22 |
| CVE-2026-11727 | high | 8.1 | No | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially exec... | 2026-09-22 |
| CVE-2026-11726 | high | 8.1 | No | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of ser... | 2026-09-22 |
| CVE-2026-11725 | high | 8.8 | No | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow i... | 2026-09-22 |
| CVE-2026-11716 | high | 7.5 | No | IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbi... | 2026-09-22 |
| CVE-2026-11711 | medium | 6.5 | No | IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component. | 2026-09-22 |
| CVE-2026-11710 | medium | 6.5 | No | IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length heade... | 2026-09-22 |
| CVE-2026-11545 | low | 3.7 | No | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console d... | 2026-09-22 |
| CVE-2026-11540 | medium | 5.3 | No | IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the... | 2026-09-22 |