Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103594 | not reported | — | No | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the... | 2026-10-28 |
| CVE-2026-63576 | high | 7.5 | No | Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7... | 2026-10-28 |
| CVE-2026-63577 | high | 7.5 | No | Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in Legion of the Bo... | 2026-10-28 |
| CVE-2026-105457 | medium | 6.5 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversa... | 2026-10-28 |
| CVE-2026-16020 | medium | 5.4 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fazile BACAK DefterAsist Financial Adv... | 2026-10-28 |
| CVE-2026-63578 | high | 7.5 | No | Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) in Legion of the Bou... | 2026-10-28 |
| CVE-2026-104030 | medium | 5.5 | No | A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passke... | 2026-10-28 |
| CVE-2026-104031 | medium | 5.5 | No | A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request proces... | 2026-10-28 |
| CVE-2026-58257 | high | 7.2 | No | GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration featu... | 2026-10-28 |
| CVE-2026-58256 | critical | 9.1 | No | GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject ma... | 2026-10-28 |
| CVE-2026-104032 | medium | 5.5 | No | A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to... | 2026-10-28 |
| CVE-2026-87879 | medium | 5.9 | No | Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Win... | 2026-10-28 |
| CVE-2026-87101 | medium | 6.2 | No | Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Win... | 2026-10-28 |
| CVE-2026-87100 | low | 3.6 | No | Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protec... | 2026-10-28 |
| CVE-2026-87099 | medium | 5.7 | No | Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Li... | 2026-10-28 |
| CVE-2026-87098 | low | 3.1 | No | Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Window... | 2026-10-28 |
| CVE-2026-87097 | medium | 5.3 | No | Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17... | 2026-10-28 |
| CVE-2026-57199 | not reported | — | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-10-28 |
| CVE-2026-57192 | not reported | — | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-10-28 |
| CVE-2026-57191 | not reported | — | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-10-28 |