Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82312 | not reported | — | No | OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NUL... | 2026-09-08 |
| CVE-2026-81830 | not reported | — | No | The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directo... | 2026-09-08 |
| CVE-2026-81738 | not reported | — | No | OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-S... | 2026-09-08 |
| CVE-2026-78221 | not reported | — | No | An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users... | 2026-09-08 |
| CVE-2026-78043 | not reported | — | No | The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration dir... | 2026-09-08 |
| CVE-2025-67038 | critical | 9.8 | Listed | An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authenticatio... | 2026-09-08 |
| CVE-2026-62654 | medium | 6.8 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key... | 2026-09-08 |
| CVE-2026-62650 | high | 8.8 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management in... | 2026-09-08 |
| CVE-2026-62648 | high | 7.5 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated... | 2026-09-08 |
| CVE-2026-62645 | critical | 9.8 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be us... | 2026-09-08 |
| CVE-2026-50093 | critical | 9.0 | No | A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All version... | 2026-09-08 |
| CVE-2026-20517 | medium | 6.7 | No | In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malic... | 2026-09-08 |
| CVE-2026-20515 | medium | 5.5 | No | In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileg... | 2026-09-08 |
| CVE-2026-20511 | medium | 6.7 | No | In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malici... | 2026-09-08 |
| CVE-2026-20510 | medium | 6.7 | No | In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a... | 2026-09-08 |
| CVE-2026-81302 | high | 7.8 | No | PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code wi... | 2026-09-08 |
| CVE-2026-70403 | critical | 9.8 | No | XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected de... | 2026-09-08 |
| CVE-2026-69657 | critical | 9.8 | No | XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected devi... | 2026-09-08 |
| CVE-2026-66840 | high | 7.5 | No | XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system informa... | 2026-09-08 |
| CVE-2026-62928 | critical | 9.8 | No | XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected. | 2026-09-08 |