Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-80871 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove crypto_rng interface Implementing the cry... | 2026-09-04 |
| CVE-2026-80870 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Validate CRIU-restored IDs before idr_alloc The KFD CRIU r... | 2026-09-04 |
| CVE-2026-80869 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfs_read_inode_mount() The $M... | 2026-09-04 |
| CVE-2026-80868 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ntfs3: Allocate iomap inline_data using alloc_page This fixes a BUG re... | 2026-09-04 |
| CVE-2026-80867 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Cur... | 2026-09-04 |
| CVE-2026-80865 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_syms As reported by sashi... | 2026-09-04 |
| CVE-2026-57777 | high | 7.6 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooCommerce allows Blind SQ... | 2026-09-04 |
| CVE-2026-78604 | high | 7.8 | No | Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries... | 2026-09-04 |
| CVE-2026-78609 | medium | 5.4 | No | Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via Metadata Spoofing (... | 2026-09-04 |
| CVE-2026-56855 | high | 7.5 | No | Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. No... | 2026-09-04 |
| CVE-2026-78662 | high | 7.5 | No | Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's... | 2026-09-04 |
| CVE-2026-85512 | high | 7.3 | No | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the... | 2026-09-04 |
| CVE-2026-85187 | high | 7.3 | No | A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order... | 2026-09-04 |
| CVE-2026-80820 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: xfs: don't livelock in scrub on a circular unlinked list LOLLM points... | 2026-09-04 |
| CVE-2026-80784 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcp_pm_de... | 2026-09-04 |
| CVE-2026-80776 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: futex: Fix race in futex_pivot_pending() during private hash resize A... | 2026-09-04 |
| CVE-2026-84394 | high | 7.5 | No | fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an op... | 2026-09-04 |
| CVE-2026-85403 | high | 7.3 | No | A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php.... | 2026-09-04 |
| CVE-2026-85397 | high | 7.3 | No | A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.p... | 2026-09-04 |
| CVE-2026-85379 | high | 7.3 | No | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This... | 2026-09-04 |