Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118175 | not reported | — | No | When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the... | 2026-10-28 |
| CVE-2026-118174 | not reported | — | No | When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer import... | 2026-10-28 |
| CVE-2026-103601 | high | 7.5 | No | Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the Bouncy Castle In... | 2026-10-28 |
| CVE-2026-112351 | high | 8.8 | No | Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated r... | 2026-10-28 |
| CVE-2026-112350 | high | 7.5 | No | Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote a... | 2026-10-28 |
| CVE-2026-63575 | high | 7.5 | No | Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy Castle Inc. bc-csharp... | 2026-10-28 |
| CVE-2026-93866 | not reported | — | No | An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unaut... | 2026-10-28 |
| CVE-2026-93434 | not reported | — | No | An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with acces... | 2026-10-28 |
| CVE-2026-90464 | not reported | — | No | An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attack... | 2026-10-28 |
| CVE-2026-90442 | not reported | — | No | A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox man... | 2026-10-28 |
| CVE-2026-82332 | not reported | — | No | An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthent... | 2026-10-28 |
| CVE-2026-115495 | not reported | — | No | Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attack... | 2026-10-28 |
| CVE-2026-113881 | not reported | — | No | A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user... | 2026-10-28 |
| CVE-2026-112710 | not reported | — | No | A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts tr... | 2026-10-28 |
| CVE-2026-112709 | not reported | — | No | A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic t... | 2026-10-28 |
| CVE-2026-111107 | not reported | — | No | A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with net... | 2026-10-28 |
| CVE-2026-104381 | not reported | — | No | A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positio... | 2026-10-28 |
| CVE-2026-103594 | not reported | — | No | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the... | 2026-10-28 |
| CVE-2026-63576 | high | 7.5 | No | Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7... | 2026-10-28 |
| CVE-2026-63577 | high | 7.5 | No | Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in Legion of the Bo... | 2026-10-28 |