Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108308 | medium | 6.5 | No | Tanium addressed a SQL injection vulnerability in Patch. | 2026-10-28 |
| CVE-2026-108307 | high | 7.8 | No | Tanium addressed a heap-based buffer overflow vulnerability in Index. | 2026-10-28 |
| CVE-2026-108306 | high | 7.8 | No | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 2026-10-28 |
| CVE-2026-108305 | high | 7.8 | No | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 2026-10-28 |
| CVE-2026-108304 | high | 7.8 | No | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 2026-10-28 |
| CVE-2026-108303 | high | 8.8 | No | Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. | 2026-10-28 |
| CVE-2026-108302 | medium | 4.3 | No | Tanium addressed an improper access controls vulnerability in Comply. | 2026-10-28 |
| CVE-2026-108301 | medium | 6.0 | No | Tanium addressed an improper access controls vulnerability in Comply. | 2026-10-28 |
| CVE-2026-109090 | high | 7.5 | No | A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4. | 2026-10-28 |
| CVE-2026-109089 | high | 7.5 | No | A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server. | 2026-10-28 |
| CVE-2026-109088 | medium | 6.5 | No | A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback functio... | 2026-10-28 |
| CVE-2026-110540 | high | 7.1 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-28 |
| CVE-2026-103799 | critical | 9.6 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-28 |
| CVE-2026-115413 | high | 7.8 | No | Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run... | 2026-10-28 |
| CVE-2026-105781 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | 2026-10-28 |
| CVE-2026-105780 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the co... | 2026-10-28 |
| CVE-2026-105779 | critical | 9.1 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | 2026-10-28 |
| CVE-2026-104353 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vu... | 2026-10-28 |
| CVE-2026-104351 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in... | 2026-10-28 |
| CVE-2026-104350 | critical | 9.3 | No | Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerabili... | 2026-10-28 |