Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-71624 | critical | 9.8 | No | An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controlle... | 2026-09-09 |
| CVE-2021-44319 | high | 7.5 | No | Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-Fi deauthentication a... | 2026-09-09 |
| CVE-2026-78745 | critical | 9.8 | No | An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via the Android Debug Br... | 2026-09-09 |
| CVE-2026-75169 | high | 8.8 | No | An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenti... | 2026-09-09 |
| CVE-2026-75165 | medium | 6.5 | No | An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privilege... | 2026-09-09 |
| CVE-2026-75161 | high | 8.8 | No | An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated u... | 2026-09-09 |
| CVE-2026-85505 | high | 7.5 | No | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujit... | 2026-09-09 |
| CVE-2026-17469 | medium | 5.5 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD q... | 2026-09-09 |
| CVE-2026-77104 | high | 7.5 | No | CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Upd... | 2026-09-09 |
| CVE-2026-77103 | high | 7.5 | No | CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to... | 2026-09-09 |
| CVE-2026-77102 | high | 7.5 | No | CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance re... | 2026-09-09 |
| CVE-2026-77101 | high | 7.5 | No | CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance r... | 2026-09-09 |
| CVE-2026-17470 | high | 7.5 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow. | 2026-09-09 |
| CVE-2026-77105 | high | 8.8 | No | CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved main... | 2026-09-09 |
| CVE-2026-86550 | medium | 6.5 | No | NuBrowser lacks protocol whitelist validation for the S.browser_fallback_url field of intent://, allowing attackers to inject javascript: UR... | 2026-09-09 |
| CVE-2026-78325 | not reported | — | No | Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to exe... | 2026-09-09 |
| CVE-2026-82911 | not reported | — | No | Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero Flow CRM before 5.15... | 2026-09-09 |
| CVE-2026-13148 | not reported | — | No | Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects sma... | 2026-09-09 |
| CVE-2026-81846 | low | 3.5 | No | An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0. This issue is an instance of CWE-639:... | 2026-09-09 |
| CVE-2026-18796 | not reported | — | No | Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integr... | 2026-09-09 |