Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-18151 medium 4.2 No IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition during the... 2026-09-16
CVE-2026-63523 medium 6.1 No Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker t... 2026-09-16
CVE-2026-12752 high 7.1 No IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing X... 2026-09-16
CVE-2026-12355 high 8.1 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-12354 high 7.5 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-12351 critical 9.8 No IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 LTS, and 10.0.0.0 cou... 2026-09-16
CVE-2026-11934 high 7.2 No IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation o... 2026-09-16
CVE-2026-11929 high 7.5 No IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of use... 2026-09-16
CVE-2026-11729 high 8.5 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-11728 high 8.1 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-12944 critical 9.6 No IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow serv... 2026-09-16
CVE-2026-12756 high 7.1 No IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing X... 2026-09-16
CVE-2026-19290 high 7.5 No IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive... 2026-09-16
CVE-2026-13293 high 8.8 No IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through... 2026-09-16
CVE-2026-13276 medium 6.1 No IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and... 2026-09-16
CVE-2026-13260 high 7.5 No IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request res... 2026-09-16
CVE-2026-92216 medium 4.3 No A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/web_core/s... 2026-09-16
CVE-2026-92114 medium 5.3 No A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/ba... 2026-09-16
CVE-2026-78088 high 8.8 No The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Unauthenticated Arbitrary... 2026-09-16
CVE-2026-76825 high 8.4 No RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a trusted environment. Prior to... 2026-09-16