Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81927 | medium | 5.4 | No | Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processing was set to the non... | 2026-09-18 |
| CVE-2026-84572 | high | 7.1 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta... | 2026-09-18 |
| CVE-2026-86902 | medium | 5.5 | No | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27,... | 2026-09-18 |
| CVE-2026-86900 | medium | 6.5 | No | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciousl... | 2026-09-18 |
| CVE-2026-86898 | medium | 5.4 | No | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, vi... | 2026-09-18 |
| CVE-2026-81918 | medium | 4.8 | No | Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A user with edit_page_co... | 2026-09-18 |
| CVE-2026-71403 | medium | 6.1 | No | A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's `username` and `principalId... | 2026-09-18 |
| CVE-2026-86886 | medium | 5.5 | No | A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27,... | 2026-09-18 |
| CVE-2026-71404 | high | 8.7 | No | A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable `authz.management.... | 2026-09-18 |
| CVE-2026-84622 | medium | 6.2 | No | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadO... | 2026-09-18 |
| CVE-2026-75033 | high | 7.7 | No | A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io/projectId` annotati... | 2026-09-18 |
| CVE-2026-84616 | medium | 5.5 | No | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, m... | 2026-09-18 |
| CVE-2026-88005 | medium | 6.5 | No | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI's OAuth token excha... | 2026-09-18 |
| CVE-2026-88006 | medium | 6.5 | No | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exch... | 2026-09-18 |
| CVE-2026-90804 | medium | 6.1 | No | A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/el... | 2026-09-18 |
| CVE-2026-90801 | medium | 6.6 | No | A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld... | 2026-09-18 |
| CVE-2026-90802 | medium | 4.4 | No | A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This... | 2026-09-18 |
| CVE-2026-90803 | medium | 6.8 | No | A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section... | 2026-09-18 |
| CVE-2026-84571 | medium | 4.3 | No | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, v... | 2026-09-18 |
| CVE-2026-43674 | medium | 4.6 | No | An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical... | 2026-09-18 |