Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-50522 | not reported | — | Listed | Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code o... | — |
| CVE-2025-68686 | not reported | — | Listed | Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticat... | — |
| CVE-2026-72898 | not reported | — | Listed | Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase app... | — |
| CVE-2026-55040 | not reported | — | Listed | Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a... | — |
| CVE-2026-59310 | not reported | — | Listed | Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute a... | — |
| CVE-2026-72529 | not reported | — | Listed | TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with... | — |
| CVE-2026-72530 | not reported | — | Listed | TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/T... | — |
| CVE-2026-73570 | not reported | — | Listed | Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specia... | — |
| CVE-2026-21962 | not reported | — | Listed | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized... | — |
| CVE-2026-60004 | not reported | — | Listed | Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatc... | — |
| CVE-2019-1068 | not reported | — | Listed | Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL S... | — |
| CVE-2026-8452 | not reported | — | Listed | Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability... | — |
| CVE-2022-0995 | not reported | — | Listed | Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial... | — |
| CVE-2015-5287 | not reported | — | Listed | Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissi... | — |
| CVE-2021-23758 | not reported | — | Listed | Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via ar... | — |
| CVE-2023-49105 | not reported | — | Listed | ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authenticat... | — |