Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102812 | not reported | — | No | A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed... | 2026-10-28 |
| CVE-2026-87897 | medium | 4.6 | No | A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for anot... | 2026-10-28 |
| CVE-2026-82986 | medium | 4.6 | No | The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though t... | 2026-10-28 |
| CVE-2026-82984 | medium | 4.3 | No | When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member o... | 2026-10-28 |
| CVE-2026-82983 | low | 3.3 | No | The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level pe... | 2026-10-28 |
| CVE-2026-77173 | medium | 4.3 | No | A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not b... | 2026-10-28 |
| CVE-2026-77172 | medium | 5.3 | No | App passwords were allowed to bypass password confirmation on sensitive endpoints. | 2026-10-28 |
| CVE-2026-77171 | low | 3.5 | No | A public shared collective always allowed recipients of the link to create pages. | 2026-10-28 |
| CVE-2026-77167 | high | 7.5 | No | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist ind... | 2026-10-28 |
| CVE-2026-67400 | low | 3.5 | No | A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token. | 2026-10-28 |
| CVE-2026-108142 | not reported | — | No | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. | 2026-10-28 |
| CVE-2026-108141 | not reported | — | No | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to w... | 2026-10-28 |
| CVE-2026-108140 | not reported | — | No | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to w... | 2026-10-28 |
| CVE-2026-107671 | not reported | — | No | A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally bef... | 2026-10-28 |
| CVE-2026-106078 | not reported | — | No | A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses... | 2026-10-28 |
| CVE-2026-106077 | not reported | — | No | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with... | 2026-10-28 |
| CVE-2026-106076 | not reported | — | No | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backu... | 2026-10-28 |
| CVE-2026-105477 | not reported | — | No | A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Repl... | 2026-10-28 |
| CVE-2025-64394 | not reported | — | No | A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup... | 2026-10-28 |
| CVE-2026-114598 | high | 7.5 | No | In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the applicatio... | 2026-10-28 |