Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87958 | high | 8.1 | No | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server... | 2026-09-14 |
| CVE-2026-78124 | low | 3.7 | No | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after i... | 2026-09-14 |
| CVE-2026-78126 | medium | 5.9 | No | strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. | 2026-09-14 |
| CVE-2026-78127 | low | 3.7 | No | libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. | 2026-09-14 |
| CVE-2026-78129 | medium | 5.9 | No | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. | 2026-09-14 |
| CVE-2026-78131 | low | 3.7 | No | strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parse... | 2026-09-14 |
| CVE-2026-78132 | high | 7.5 | No | strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. | 2026-09-14 |
| CVE-2026-78133 | high | 7.5 | No | libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. | 2026-09-14 |
| CVE-2026-78134 | high | 7.1 | No | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatche... | 2026-09-14 |
| CVE-2026-88050 | medium | 5.5 | No | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates l... | 2026-09-14 |
| CVE-2026-88049 | medium | 5.5 | No | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTim... | 2026-09-14 |
| CVE-2026-88048 | high | 7.1 | No | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not va... | 2026-09-14 |
| CVE-2026-88047 | high | 7.8 | No | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORM... | 2026-09-14 |
| CVE-2026-88018 | critical | 9.8 | No | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve... | 2026-09-14 |
| CVE-2026-88017 | high | 7.3 | No | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the... | 2026-09-14 |
| CVE-2026-88012 | medium | 5.3 | No | Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints do not apply entryPo... | 2026-09-14 |
| CVE-2026-88009 | high | 8.2 | No | Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request targ... | 2026-09-14 |
| CVE-2026-88008 | critical | 9.1 | No | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Co... | 2026-09-14 |
| CVE-2026-88007 | critical | 9.1 | No | Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does... | 2026-09-14 |
| CVE-2026-88004 | high | 7.4 | No | Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, u... | 2026-09-14 |