Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-12745 | critical | 9.8 | No | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execu... | 2026-09-18 |
| CVE-2026-92932 | not reported | — | No | In the MISP sachertortephp library, the Xml::build() static method in lib/Cake/Utility/Xml.php contains a logic error in the conditional tha... | 2026-09-18 |
| CVE-2023-5778 | high | 7.5 | No | Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freel... | 2026-09-18 |
| CVE-2026-92839 | medium | 4.3 | No | Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrar... | 2026-09-18 |
| CVE-2026-81546 | high | 7.7 | No | The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity docum... | 2026-09-18 |
| CVE-2026-90999 | critical | 9.8 | No | Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated attacker-controlled telemetry to become code... | 2026-09-18 |
| CVE-2026-7848 | not reported | — | No | Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "ho... | 2026-09-18 |
| CVE-2026-15600 | not reported | — | No | Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The... | 2026-09-18 |
| CVE-2026-92943 | high | 8.1 | No | Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through... | 2026-09-18 |
| CVE-2026-92230 | high | 7.5 | No | Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a Thre... | 2026-09-18 |
| CVE-2026-65388 | high | 7.5 | No | A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and d... | 2026-09-18 |
| CVE-2026-92808 | not reported | — | No | A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthenticated networ... | 2026-09-18 |
| CVE-2026-84530 | low | 3.3 | No | An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and i... | 2026-09-18 |
| CVE-2026-84525 | medium | 5.5 | No | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.... | 2026-09-18 |
| CVE-2026-65403 | medium | 5.5 | No | This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27,... | 2026-09-18 |
| CVE-2026-56997 | high | 8.8 | No | In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote... | 2026-09-18 |
| CVE-2026-57006 | medium | 4.4 | No | In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System... | 2026-09-18 |
| CVE-2026-57008 | high | 7.5 | No | In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with... | 2026-09-18 |
| CVE-2026-65399 | medium | 4.4 | No | A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS... | 2026-09-18 |
| CVE-2026-86869 | medium | 6.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate... | 2026-09-18 |