Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-20131 | not reported | — | Listed | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization... | — |
| CVE-2025-54068 | not reported | — | Listed | Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in sp... | — |
| CVE-2026-33017 | not reported | — | Listed | Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication. | — |
| CVE-2026-33634 | not reported | — | Listed | Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD... | — |
| CVE-2026-3055 | not reported | — | Listed | Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-b... | — |
| CVE-2026-5281 | not reported | — | Listed | Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute... | — |
| CVE-2026-3502 | not reported | — | Listed | TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery... | — |
| CVE-2026-35616 | not reported | — | Listed | Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorize... | — |
| CVE-2026-1340 | not reported | — | Listed | Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote c... | — |
| CVE-2026-21643 | not reported | — | Listed | Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or c... | — |
| CVE-2020-9715 | not reported | — | Listed | Adobe Acrobat contains a use-after-free vulnerability that allows for code execution | — |
| CVE-2023-36424 | not reported | — | Listed | Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges... | — |
| CVE-2023-21529 | not reported | — | Listed | Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code executio... | — |
| CVE-2012-1854 | not reported | — | Listed | Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. | — |
| CVE-2009-0238 | not reported | — | Listed | Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected s... | — |
| CVE-2024-27199 | not reported | — | Listed | JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed. | — |
| CVE-2025-32975 | not reported | — | Listed | Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow attackers to impersonate le... | — |
| CVE-2026-20128 | not reported | — | Listed | Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacke... | — |
| CVE-2025-48700 | not reported | — | Listed | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaS... | — |
| CVE-2025-2749 | not reported | — | Listed | Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary d... | — |