Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-66303 medium 6.5 No Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network. 2026-09-16
CVE-2026-66302 critical 9.8 No External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network. 2026-09-16
CVE-2026-12742 medium 5.4 No IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due t... 2026-09-16
CVE-2026-12358 high 7.5 No IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request res... 2026-09-16
CVE-2026-11926 high 7.5 No IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request res... 2026-09-16
CVE-2026-18251 medium 4.3 No IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origi... 2026-09-16
CVE-2026-17628 medium 5.4 No IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authe... 2026-09-16
CVE-2026-17467 high 8.2 No IBM Cloud Pak for Data System (Yosemite 1.0) 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or... 2026-09-16
CVE-2026-17463 medium 6.5 No IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote auth... 2026-09-16
CVE-2026-17416 high 7.8 No IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code... 2026-09-16
CVE-2026-17156 high 7.8 No IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code... 2026-09-16
CVE-2026-17133 high 7.8 No IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code... 2026-09-16
CVE-2026-17047 medium 5.4 No IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation. 2026-09-16
CVE-2026-16702 medium 6.5 No IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote auth... 2026-09-16
CVE-2026-16188 medium 5.3 No IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative lo... 2026-09-16
CVE-2026-16187 medium 6.5 No IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication and obtain sensitive information by sen... 2026-09-16
CVE-2026-16186 medium 5.4 No IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability. 2026-09-16
CVE-2026-16185 medium 6.4 No IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet. 2026-09-16
CVE-2026-19543 medium 6.2 No IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on... 2026-09-16
CVE-2026-18515 medium 4.3 No IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they... 2026-09-16