Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-20514 | medium | 4.4 | No | In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure... | 2026-09-08 |
| CVE-2026-20513 | medium | 4.4 | No | In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure i... | 2026-09-08 |
| CVE-2026-20512 | medium | 6.7 | No | In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege... | 2026-09-08 |
| CVE-2026-20509 | medium | 6.7 | No | In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a m... | 2026-09-08 |
| CVE-2026-20508 | medium | 6.7 | No | In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malic... | 2026-09-08 |
| CVE-2026-20507 | medium | 6.7 | No | In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malic... | 2026-09-08 |
| CVE-2026-20506 | medium | 6.7 | No | In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malic... | 2026-09-08 |
| CVE-2026-84391 | medium | 6.5 | No | A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via | 2026-09-08 |
| CVE-2026-26084 | critical | 9.9 | No | A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5... | 2026-09-08 |
| CVE-2026-22575 | medium | 4.9 | No | An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 a... | 2026-09-08 |
| CVE-2026-85640 | medium | 6.3 | No | Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component | 2026-09-08 |
| CVE-2026-77699 | medium | 5.0 | No | Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an... | 2026-09-08 |
| CVE-2026-77697 | medium | 6.3 | No | Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction | 2026-09-08 |
| CVE-2026-77698 | medium | 5.7 | No | Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade. | 2026-09-08 |
| CVE-2026-14828 | high | 8.8 | No | Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405... | 2026-09-08 |
| CVE-2026-86667 | medium | 4.7 | No | A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list of the file controlle... | 2026-09-08 |
| CVE-2026-86665 | high | 7.3 | No | A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/... | 2026-09-08 |
| CVE-2026-86644 | low | 3.5 | No | A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file web_src/public/editor.md/... | 2026-09-08 |
| CVE-2026-78602 | medium | 5.3 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Elastic Maps Server can lead to information discl... | 2026-09-08 |
| CVE-2026-86232 | medium | 6.3 | No | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of... | 2026-09-08 |