Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-25108 | not reported | — | Listed | Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a speciall... | — |
| CVE-2026-20127 | not reported | — | Listed | Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authenticat... | — |
| CVE-2022-20775 | not reported | — | Listed | Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via im... | — |
| CVE-2026-21385 | not reported | — | Listed | Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation. | — |
| CVE-2026-22719 | not reported | — | Listed | Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unau... | — |
| CVE-2023-41974 | not reported | — | Listed | Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges. | — |
| CVE-2021-30952 | not reported | — | Listed | Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously c... | — |
| CVE-2021-22681 | not reported | — | Listed | Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key... | — |
| CVE-2017-7921 | not reported | — | Listed | Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the... | — |
| CVE-2026-1603 | not reported | — | Listed | Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote u... | — |
| CVE-2026-3909 | not reported | — | Listed | Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a cr... | — |
| CVE-2026-3910 | not reported | — | Listed | Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remo... | — |
| CVE-2025-47813 | not reported | — | Listed | Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID coo... | — |
| CVE-2026-20963 | not reported | — | Listed | Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a... | — |
| CVE-2026-20131 | not reported | — | Listed | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization... | — |
| CVE-2025-54068 | not reported | — | Listed | Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in sp... | — |
| CVE-2026-33017 | not reported | — | Listed | Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication. | — |
| CVE-2026-33634 | not reported | — | Listed | Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD... | — |
| CVE-2026-3055 | not reported | — | Listed | Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-b... | — |
| CVE-2026-5281 | not reported | — | Listed | Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute... | — |