Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110881 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureDash suredash all... | 2026-10-29 |
| CVE-2026-116014 | high | 8.1 | No | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for... | 2026-10-29 |
| CVE-2026-115638 | medium | 4.3 | No | OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a... | 2026-10-29 |
| CVE-2026-110686 | medium | 6.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv. A deco... | 2026-10-29 |
| CVE-2026-110685 | critical | 9.1 | No | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag. With a... | 2026-10-29 |
| CVE-2026-110684 | high | 8.1 | No | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in enco... | 2026-10-29 |
| CVE-2026-110682 | high | 7.5 | No | Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse. al... | 2026-10-29 |
| CVE-2026-110678 | high | 7.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse. The pars... | 2026-10-29 |
| CVE-2026-110677 | high | 7.5 | No | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_... | 2026-10-29 |
| CVE-2026-110676 | high | 7.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bign... | 2026-10-29 |
| CVE-2026-110675 | high | 8.1 | No | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv. With ut... | 2026-10-29 |
| CVE-2026-110674 | medium | 6.5 | No | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayr... | 2026-10-29 |
| CVE-2026-110673 | high | 7.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag. With allow_t... | 2026-10-29 |
| CVE-2026-110672 | high | 7.5 | No | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_h... | 2026-10-29 |
| CVE-2026-107618 | high | 8.1 | No | `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, so a request issued b... | 2026-10-29 |
| CVE-2026-106971 | not reported | — | No | An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a deni... | 2026-10-29 |
| CVE-2026-106175 | low | 2.3 | No | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versi... | 2026-10-29 |
| CVE-2026-91814 | medium | 5.5 | No | A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible... | 2026-10-29 |
| CVE-2026-91798 | high | 8.8 | No | A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuratio... | 2026-10-29 |
| CVE-2026-91794 | high | 7.8 | No | An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boun... | 2026-10-29 |