Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91719 | high | 8.1 | No | Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.... | 2026-09-18 |
| CVE-2026-87544 | critical | 9.8 | No | Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions... | 2026-09-18 |
| CVE-2026-76409 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a... | 2026-09-18 |
| CVE-2026-75992 | high | 7.8 | No | Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current... | 2026-09-18 |
| CVE-2026-54510 | high | 7.1 | No | Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrf_exempt_for_api... | 2026-09-18 |
| CVE-2026-20344 | high | 8.8 | No | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform... | 2026-09-18 |
| CVE-2026-20326 | critical | 9.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a... | 2026-09-18 |
| CVE-2026-20322 | critical | 9.9 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a... | 2026-09-18 |
| CVE-2026-20237 | critical | 9.1 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Pass... | 2026-09-18 |
| CVE-2026-16750 | medium | 5.3 | No | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing au... | 2026-09-18 |
| CVE-2026-75999 | high | 8.4 | No | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the cur... | 2026-09-18 |
| CVE-2026-28384 | critical | 9.9 | No | An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute comma... | 2026-09-18 |
| CVE-2026-86884 | medium | 5.5 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27,... | 2026-09-18 |
| CVE-2026-84615 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27,... | 2026-09-18 |
| CVE-2026-84600 | medium | 5.4 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS... | 2026-09-18 |
| CVE-2026-92141 | medium | 4.3 | No | Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform phish... | 2026-09-18 |
| CVE-2026-92140 | medium | 6.8 | No | Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, result... | 2026-09-18 |
| CVE-2026-92139 | medium | 6.5 | No | Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and... | 2026-09-18 |
| CVE-2026-92138 | medium | 4.2 | No | The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the su... | 2026-09-18 |
| CVE-2026-92137 | high | 8.8 | No | Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is co... | 2026-09-18 |