Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-48907 | not reported | — | Listed | Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP cod... | — |
| CVE-2026-20253 | not reported | — | Listed | Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create... | — |
| CVE-2026-34908 | not reported | — | Listed | Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make u... | — |
| CVE-2026-34909 | not reported | — | Listed | Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on... | — |
| CVE-2026-34910 | not reported | — | Listed | Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to cond... | — |
| CVE-2026-12569 | not reported | — | Listed | PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitr... | — |
| CVE-2026-45659 | not reported | — | Listed | Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code o... | — |
| CVE-2026-56164 | not reported | — | Listed | Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate p... | — |
| CVE-2026-56155 | not reported | — | Listed | Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorize... | — |
| CVE-2023-4346 | not reported | — | Listed | KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that c... | — |
| CVE-2026-46817 | not reported | — | Listed | Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access... | — |
| CVE-2026-25089 | not reported | — | Listed | Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticate... | — |
| CVE-2026-58644 | not reported | — | Listed | Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a... | — |
| CVE-2021-27137 | not reported | — | Listed | DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used... | — |
| CVE-2026-0770 | not reported | — | Listed | Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrar... | — |
| CVE-2026-50522 | not reported | — | Listed | Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code o... | — |
| CVE-2025-68686 | not reported | — | Listed | Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticat... | — |
| CVE-2026-72898 | not reported | — | Listed | Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase app... | — |
| CVE-2026-55040 | not reported | — | Listed | Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a... | — |
| CVE-2026-59310 | not reported | — | Listed | Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute a... | — |