Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-73732 | medium | 5.6 | No | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator use... | 2026-09-03 |
| CVE-2026-84781 | medium | 6.5 | No | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions. | 2026-09-03 |
| CVE-2026-84772 | medium | 5.5 | No | Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions. | 2026-09-03 |
| CVE-2026-84759 | high | 7.1 | No | Unauthenticated Cross Site Request Forgery (CSRF) in Activity Log <= 2.13.1 versions. | 2026-09-03 |
| CVE-2026-82883 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus Login With Ajax allows Reflecte... | 2026-09-03 |
| CVE-2026-81772 | high | 8.8 | No | Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions. | 2026-09-03 |
| CVE-2026-78586 | medium | 6.5 | No | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130... | 2026-09-03 |
| CVE-2026-78590 | high | 7.3 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthor... | 2026-09-03 |
| CVE-2026-78591 | medium | 6.3 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthor... | 2026-09-03 |
| CVE-2026-78599 | medium | 6.5 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature can lead to the unauthor... | 2026-09-03 |
| CVE-2026-78601 | medium | 5.5 | No | Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authorization control was n... | 2026-09-03 |
| CVE-2026-78598 | medium | 5.4 | No | Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to information disclosure via Exploiting Incorrectly Confi... | 2026-09-03 |
| CVE-2026-78584 | medium | 4.3 | No | Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Information... | 2026-09-03 |
| CVE-2026-9698 | critical | 9.8 | No | DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or... | 2026-09-03 |
| CVE-2026-83548 | critical | 10.0 | Listed | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A r... | 2026-09-03 |
| CVE-2026-80757 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common se... | 2026-09-03 |
| CVE-2026-80756 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started sel_writ... | 2026-09-03 |
| CVE-2026-82329 | critical | 9.8 | Listed | JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network... | 2026-09-03 |
| CVE-2026-80746 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliz... | 2026-09-03 |
| CVE-2026-80744 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort... | 2026-09-03 |