Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118039 | high | 7.5 | No | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG imag... | 2026-10-28 |
| CVE-2026-118038 | high | 7.1 | No | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI... | 2026-10-28 |
| CVE-2026-118037 | high | 7.5 | No | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, unchecked loop cond... | 2026-10-28 |
| CVE-2026-118036 | high | 7.5 | No | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorit... | 2026-10-28 |
| CVE-2026-118035 | high | 7.5 | No | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient algorithmic complexity... | 2026-10-28 |
| CVE-2026-86390 | medium | 6.5 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-28 |
| CVE-2026-86388 | medium | 5.3 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-28 |
| CVE-2026-86386 | medium | 4.3 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-28 |
| CVE-2026-86383 | medium | 6.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 rele... | 2026-10-28 |
| CVE-2026-90724 | low | 2.7 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-28 |
| CVE-2026-90723 | low | 2.7 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-28 |
| CVE-2026-90719 | low | 2.7 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-28 |
| CVE-2026-86401 | low | 2.7 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-28 |
| CVE-2026-21830 | low | 3.7 | No | HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non... | 2026-10-28 |
| CVE-2026-67080 | medium | 6.5 | No | HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This cou... | 2026-10-28 |
| CVE-2026-67079 | medium | 6.4 | No | HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web pa... | 2026-10-28 |
| CVE-2026-67077 | medium | 4.2 | No | HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send un... | 2026-10-28 |
| CVE-2026-67074 | critical | 9.1 | No | HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affe... | 2026-10-28 |
| CVE-2026-67073 | high | 8.6 | No | HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload... | 2026-10-28 |
| CVE-2026-63947 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidp_input_report() hidp... | 2026-10-28 |