Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-55343 | high | 8.0 | No | In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote co... | 2026-09-21 |
| CVE-2026-55351 | high | 7.8 | No | In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additio... | 2026-09-21 |
| CVE-2026-55359 | high | 7.8 | No | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privil... | 2026-09-21 |
| CVE-2026-55365 | medium | 6.7 | No | In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalat... | 2026-09-21 |
| CVE-2026-55366 | critical | 9.8 | No | In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation... | 2026-09-21 |
| CVE-2026-56879 | medium | 6.7 | No | In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of p... | 2026-09-21 |
| CVE-2026-56881 | high | 8.4 | No | In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of... | 2026-09-21 |
| CVE-2026-56882 | high | 8.8 | No | In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution wit... | 2026-09-21 |
| CVE-2026-94098 | critical | 9.1 | No | A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgra... | 2026-09-21 |
| CVE-2026-94093 | medium | 6.3 | No | A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/load_replay_buffer/Ve... | 2026-09-21 |
| CVE-2026-94051 | medium | 6.3 | No | A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the func... | 2026-09-21 |
| CVE-2026-94046 | medium | 4.3 | No | A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_snippet of the file get... | 2026-09-21 |
| CVE-2026-94113 | medium | 6.5 | No | Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whitelisted timesheet end... | 2026-09-21 |
| CVE-2026-94041 | medium | 6.3 | No | A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by th... | 2026-09-21 |
| CVE-2026-94036 | high | 8.8 | No | A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown functio... | 2026-09-21 |
| CVE-2026-94031 | medium | 6.3 | No | A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function child_... | 2026-09-21 |
| CVE-2026-94004 | high | 7.3 | No | A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_js.php. The manipulat... | 2026-09-21 |
| CVE-2026-56888 | medium | 6.2 | No | In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation... | 2026-09-21 |
| CVE-2026-90504 | high | 7.3 | No | A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the functi... | 2026-09-21 |
| CVE-2026-90499 | medium | 5.4 | No | A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of... | 2026-09-21 |