Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92136 | high | 8.0 | No | Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resultin... | 2026-09-18 |
| CVE-2026-92135 | high | 8.0 | No | Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted thr... | 2026-09-18 |
| CVE-2026-92134 | high | 8.0 | No | Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis results ID when a job configuration is submitte... | 2026-09-18 |
| CVE-2026-92133 | medium | 5.4 | No | Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials unde... | 2026-09-18 |
| CVE-2026-92132 | medium | 5.4 | No | Jenkins Gradle Plugin 2.19.1252.v15196b_5a_6e10 and earlier requests build scan data from the build scan link detected in the build log, eve... | 2026-09-18 |
| CVE-2026-92131 | medium | 4.2 | No | Jenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the library path provided to the library Pipeline... | 2026-09-18 |
| CVE-2026-92130 | low | 3.1 | No | Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials lookup in the resol... | 2026-09-18 |
| CVE-2026-89418 | not reported | — | No | google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of... | 2026-09-18 |
| CVE-2026-21822 | medium | 6.3 | No | HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths al... | 2026-09-18 |
| CVE-2026-86909 | medium | 4.4 | No | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gateke... | 2026-09-18 |
| CVE-2026-84620 | high | 7.3 | No | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mac... | 2026-09-18 |
| CVE-2026-76438 | medium | 6.5 | No | A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remot... | 2026-09-18 |
| CVE-2026-76413 | high | 8.2 | No | A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an u... | 2026-09-18 |
| CVE-2026-76412 | high | 8.5 | No | A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the... | 2026-09-18 |
| CVE-2026-20360 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a... | 2026-09-18 |
| CVE-2026-20352 | high | 8.6 | No | A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a den... | 2026-09-18 |
| CVE-2026-20342 | high | 7.7 | No | A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbit... | 2026-09-18 |
| CVE-2026-20340 | high | 8.8 | No | A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privile... | 2026-09-18 |
| CVE-2026-20323 | high | 8.3 | No | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow a... | 2026-09-18 |
| CVE-2026-20309 | medium | 6.1 | No | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacke... | 2026-09-18 |