Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-76550 | high | 7.2 | No | The WP Import Export Lite WordPress plugin before 3.9.34 does not validate a user-supplied output path when writing export files, allowing u... | 2026-09-17 |
| CVE-2026-74926 | high | 7.1 | No | The MultiVendorX WordPress plugin before 5.0.16 does not verify that a user owns the store they are acting on in one of its REST API routes,... | 2026-09-17 |
| CVE-2026-91948 | high | 7.5 | No | FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in server-side static virtual channel handling when CHANNEL_OPTI... | 2026-09-17 |
| CVE-2026-86359 | high | 8.5 | No | Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with re... | 2026-09-17 |
| CVE-2026-76423 | critical | 10.0 | No | A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access... | 2026-09-17 |
| CVE-2026-76420 | critical | 9.0 | No | A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secure FMC Software could allow an unau... | 2026-09-17 |
| CVE-2026-73466 | medium | 6.3 | No | On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during opera... | 2026-09-17 |
| CVE-2026-73465 | medium | 6.3 | No | On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files durin... | 2026-09-17 |
| CVE-2026-73456 | critical | 10.0 | No | Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthe... | 2026-09-17 |
| CVE-2026-73447 | critical | 9.1 | No | A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. A... | 2026-09-17 |
| CVE-2026-53679 | not reported | — | No | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. | 2026-09-17 |
| CVE-2026-21587 | not reported | — | No | This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Impr... | 2026-09-17 |
| CVE-2026-21586 | not reported | — | No | This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1,... | 2026-09-17 |
| CVE-2026-20211 | critical | 9.1 | No | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system... | 2026-09-17 |
| CVE-2026-20176 | critical | 9.1 | No | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system... | 2026-09-17 |
| CVE-2026-20307 | critical | 9.9 | No | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary comman... | 2026-09-17 |
| CVE-2026-14277 | medium | 6.3 | No | IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on... | 2026-09-17 |
| CVE-2026-14276 | medium | 6.3 | No | IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands w... | 2026-09-17 |
| CVE-2026-11874 | not reported | — | No | Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. | 2026-09-17 |
| CVE-2026-14275 | medium | 6.3 | No | IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands w... | 2026-09-17 |