Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84536 | medium | 6.5 | No | An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta... | 2026-09-16 |
| CVE-2026-84535 | high | 8.2 | No | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS... | 2026-09-16 |
| CVE-2026-84517 | medium | 5.5 | No | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tah... | 2026-09-16 |
| CVE-2026-84516 | high | 8.1 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta... | 2026-09-16 |
| CVE-2026-84515 | high | 7.8 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, m... | 2026-09-16 |
| CVE-2026-84555 | medium | 5.5 | No | An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app m... | 2026-09-16 |
| CVE-2026-88034 | high | 8.3 | No | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C++ Driver can cause a caller-supplie... | 2026-09-16 |
| CVE-2026-88033 | high | 8.3 | No | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-suppli... | 2026-09-16 |
| CVE-2026-69896 | high | 7.0 | No | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-09-16 |
| CVE-2026-69891 | high | 7.0 | No | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. | 2026-09-16 |
| CVE-2026-69890 | high | 7.5 | No | Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally. | 2026-09-16 |
| CVE-2026-92383 | medium | 4.3 | No | A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserControl... | 2026-09-16 |
| CVE-2026-92380 | high | 7.3 | No | A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment... | 2026-09-16 |
| CVE-2026-92364 | medium | 6.3 | No | A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of th... | 2026-09-16 |
| CVE-2026-92362 | high | 7.3 | No | A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the... | 2026-09-16 |
| CVE-2026-91853 | high | 7.4 | No | A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224. The impacted element is the function exportOvpn of the file /cgi-b... | 2026-09-16 |
| CVE-2026-91848 | high | 7.3 | No | A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php... | 2026-09-16 |
| CVE-2026-91842 | medium | 4.1 | No | A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/s... | 2026-09-16 |
| CVE-2026-91835 | low | 2.8 | No | A vulnerability was detected in OpenClaw ClawScan up to 0.1.6. The impacted element is the function IsBinaryFile of the file internal/runner... | 2026-09-16 |
| CVE-2026-90650 | high | 7.2 | No | The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Stripe Webhook event object 'id' in al... | 2026-09-16 |