Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-1758 | high | 8.3 | No | Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects GateManager: 11.5;0, 1... | 2026-09-18 |
| CVE-2026-21391 | not reported | — | No | An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be s... | 2026-09-18 |
| CVE-2026-20773 | not reported | — | No | A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with cert... | 2026-09-18 |
| CVE-2026-81861 | not reported | — | No | CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized acc... | 2026-09-18 |
| CVE-2026-3869 | not reported | — | No | CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and... | 2026-09-18 |
| CVE-2026-85979 | not reported | — | No | Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privilege... | 2026-09-18 |
| CVE-2026-89212 | high | 8.6 | No | A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-J... | 2026-09-18 |
| CVE-2026-92259 | medium | 5.5 | No | Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directo... | 2026-09-18 |
| CVE-2026-91826 | medium | 4.4 | No | Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption w... | 2026-09-18 |
| CVE-2026-16726 | not reported | — | No | Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows attackers to stop Windows. | 2026-09-18 |
| CVE-2026-80462 | critical | 10.0 | No | A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to... | 2026-09-18 |
| CVE-2026-87886 | high | 7.8 | Listed | Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Li... | 2026-09-18 |
| CVE-2026-89207 | medium | 6.5 | No | A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17... | 2026-09-18 |
| CVE-2026-90823 | critical | 9.8 | No | FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /u... | 2026-09-18 |
| CVE-2026-90822 | critical | 9.8 | No | FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerabili... | 2026-09-18 |
| CVE-2026-90896 | not reported | — | No | Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checkout_sessions/route.ts... | 2026-09-18 |
| CVE-2026-80469 | high | 8.3 | No | An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verific... | 2026-09-18 |
| CVE-2026-28199 | low | 3.3 | No | An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system... | 2026-09-18 |
| CVE-2026-28198 | high | 8.8 | No | An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verif... | 2026-09-18 |
| CVE-2026-28197 | high | 8.8 | No | An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could supply a specially crafted input to a pr... | 2026-09-18 |