Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84550 | medium | 4.7 | No | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7... | 2026-09-16 |
| CVE-2026-79970 | medium | 5.6 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Verifica... | 2026-09-16 |
| CVE-2026-57132 | high | 8.2 | No | PraisonAI is a multi-agent teams system. Prior to 4.6.62, setting PRAISONAI_CALL_AUTH to disabled makes verify_token accept requests to /api... | 2026-09-16 |
| CVE-2026-57119 | high | 7.5 | No | PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agent_file path in... | 2026-09-16 |
| CVE-2026-57120 | medium | 6.5 | No | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, execute_code sandbox mode permits runtime assembly of blocklisted... | 2026-09-16 |
| CVE-2026-88053 | high | 7.8 | No | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClass... | 2026-09-16 |
| CVE-2026-88054 | medium | 5.5 | No | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively lar... | 2026-09-16 |
| CVE-2026-88032 | high | 7.5 | No | A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an... | 2026-09-16 |
| CVE-2026-81205 | medium | 5.3 | No | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Drupal LDAP / Active Directory Integra... | 2026-09-16 |
| CVE-2026-69503 | high | 8.0 | No | Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network. | 2026-09-16 |
| CVE-2026-69469 | medium | 6.6 | No | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a... | 2026-09-16 |
| CVE-2026-73477 | medium | 5.3 | No | Incorrect Authorization vulnerability in Drupal Quick Tabs allows Forceful Browsing. This issue affects Quick Tabs versions: from 0.0.0 to 4... | 2026-09-16 |
| CVE-2026-81201 | medium | 6.1 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Monster Menus allows Stored XSS... | 2026-09-16 |
| CVE-2026-40635 | medium | 5.4 | No | Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker... | 2026-09-16 |
| CVE-2026-46460 | low | 3.5 | No | Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Inco... | 2026-09-16 |
| CVE-2026-70425 | medium | 6.7 | No | Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain... | 2026-09-16 |
| CVE-2026-86878 | medium | 5.5 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access se... | 2026-09-16 |
| CVE-2026-65404 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadO... | 2026-09-16 |
| CVE-2026-91781 | low | 3.3 | No | A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/el... | 2026-09-16 |
| CVE-2026-91780 | low | 3.3 | No | A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Execut... | 2026-09-16 |