Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-80231 | high | 7.5 | No | A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store... | 2026-09-15 |
| CVE-2026-80230 | high | 7.5 | No | When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable standard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and `CU... | 2026-09-15 |
| CVE-2026-80229 | high | 7.5 | No | When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 pro... | 2026-09-15 |
| CVE-2026-19931 | critical | 9.8 | No | A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial requ... | 2026-09-15 |
| CVE-2026-18924 | critical | 9.1 | No | A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead... | 2026-09-15 |
| CVE-2026-13608 | high | 7.4 | No | A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful... | 2026-09-15 |
| CVE-2026-63427 | high | 7.8 | No | An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrar... | 2026-09-15 |
| CVE-2026-72710 | critical | 9.8 | No | SPIP before 4.4.18 contains a mass assignment vulnerability in the editer_objet action that allows unauthenticated attackers to write arbitr... | 2026-09-15 |
| CVE-2026-72709 | critical | 9.8 | No | SPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under ecrire/action/ that allows unauthentica... | 2026-09-15 |
| CVE-2026-87595 | critical | 9.8 | No | Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to byp... | 2026-09-14 |
| CVE-2026-87608 | high | 7.5 | No | Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to... | 2026-09-14 |
| CVE-2026-87627 | medium | 6.5 | No | Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engine... | 2026-09-14 |
| CVE-2026-67398 | not reported | — | No | Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9... | 2026-09-14 |
| CVE-2026-16148 | medium | 4.6 | No | The ITE it82xx2 USB device-controller driver initialized its bus-suspend detection work with k_work_init_delayable(&priv->suspended_work, su... | 2026-09-14 |
| CVE-2026-16147 | medium | 6.8 | No | The ITE IT82xx2 USB device-controller driver (drivers/usb/udc/udc_it82xx2.c) mishandles multi-packet OUT transfers on non-control endpoints.... | 2026-09-14 |
| CVE-2026-15924 | medium | 5.9 | No | Zephyr's TLS socket layer in subsys/net/lib/sockets/sockets_tls.c keeps a single process-global array, client_cache, of cached client sessio... | 2026-09-14 |
| CVE-2026-15893 | medium | 6.5 | No | net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c derives a randomized ND reachable time from ipv6->base_reachable_time as min_rea... | 2026-09-14 |
| CVE-2026-15923 | medium | 4.6 | No | The Zephyr SDIO subsystem function sdio_io_rw_extended_helper() in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size =... | 2026-09-14 |
| CVE-2026-15892 | medium | 5.3 | No | The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcu... | 2026-09-14 |
| CVE-2026-15891 | high | 7.5 | No | The MQTT-SN client keepalive handler process_ping() in subsys/net/lib/mqtt_sn/mqtt_sn.c removes the gateway record after PINGREQ retries are... | 2026-09-14 |