Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-12767 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF). This may allow an unauthenticated attacker to sen... | 2026-09-16 |
| CVE-2026-12766 | medium | 5.4 | No | IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send... | 2026-09-16 |
| CVE-2026-12765 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery (SSRF). This may allow an unauthenticated attacker to sen... | 2026-09-16 |
| CVE-2026-12763 | medium | 4.2 | No | IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context due to improper cach... | 2026-09-16 |
| CVE-2026-18065 | medium | 5.3 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensitive information through session IP bindin... | 2026-09-16 |
| CVE-2026-16435 | medium | 5.9 | No | IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management... | 2026-09-16 |
| CVE-2026-16190 | low | 3.1 | No | IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability. | 2026-09-16 |
| CVE-2026-16189 | medium | 4.8 | No | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative lo... | 2026-09-16 |
| CVE-2026-15955 | high | 7.5 | No | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a remote attacker to perform an arbitrary file write due to improper va... | 2026-09-16 |
| CVE-2026-15887 | medium | 5.4 | No | IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests. | 2026-09-16 |
| CVE-2026-7884 | medium | 5.4 | No | IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surn... | 2026-09-16 |
| CVE-2026-75792 | medium | 4.3 | No | IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface componen... | 2026-09-16 |
| CVE-2026-19273 | medium | 5.4 | No | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.... | 2026-09-16 |
| CVE-2026-19086 | low | 3.3 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker c... | 2026-09-16 |
| CVE-2026-18069 | medium | 6.0 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to tim... | 2026-09-16 |
| CVE-2026-66307 | high | 7.5 | No | Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network. | 2026-09-16 |
| CVE-2026-66306 | medium | 6.5 | No | Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information o... | 2026-09-16 |
| CVE-2026-66305 | high | 7.1 | No | Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network. | 2026-09-16 |
| CVE-2026-89158 | medium | 6.5 | No | PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write. | 2026-09-16 |
| CVE-2026-66304 | high | 7.5 | No | Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network. | 2026-09-16 |