Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-17259 | medium | 6.5 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow. | 2026-09-08 |
| CVE-2026-62916 | critical | 9.8 | No | Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a... | 2026-09-08 |
| CVE-2026-78583 | high | 8.1 | No | Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153). Elasticsearch cluster... | 2026-09-08 |
| CVE-2026-85042 | critical | 9.6 | No | Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox v... | 2026-09-08 |
| CVE-2026-85043 | critical | 9.1 | No | Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via cra... | 2026-09-08 |
| CVE-2026-85044 | medium | 6.5 | No | Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social enginee... | 2026-09-08 |
| CVE-2026-85045 | high | 7.5 | No | Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-09-08 |
| CVE-2026-85047 | critical | 9.6 | No | Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentiall... | 2026-09-08 |
| CVE-2026-85048 | high | 8.3 | No | Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to... | 2026-09-08 |
| CVE-2026-85049 | high | 8.8 | No | Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-09-08 |
| CVE-2026-86306 | high | 7.3 | No | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affe... | 2026-09-08 |
| CVE-2026-86300 | high | 7.3 | No | A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipu... | 2026-09-08 |
| CVE-2026-86295 | high | 8.3 | No | A vulnerability was found in D-Link DIR-895L A1_102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the componen... | 2026-09-08 |
| CVE-2026-86290 | high | 7.3 | No | A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?act... | 2026-09-08 |
| CVE-2026-86282 | high | 7.3 | No | A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an un... | 2026-09-08 |
| CVE-2026-86277 | high | 7.3 | No | A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown funct... | 2026-09-08 |
| CVE-2026-86233 | medium | 6.3 | No | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functional... | 2026-09-08 |
| CVE-2026-86226 | low | 3.5 | No | A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of th... | 2026-09-08 |
| CVE-2026-86214 | high | 7.3 | No | A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This... | 2026-09-08 |
| CVE-2026-86209 | high | 7.3 | No | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /delete_... | 2026-09-08 |