Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-57108 | high | 7.5 | No | Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-57183 | medium | 6.1 | No | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth() in src/main/java/com/erudika/scoold/utils/Scoold... | 2026-10-28 |
| CVE-2026-57084 | medium | 5.5 | No | Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally. | 2026-10-28 |
| CVE-2026-57083 | medium | 5.5 | No | Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally. | 2026-10-28 |
| CVE-2026-56170 | high | 7.5 | No | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-55587 | high | 8.1 | No | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provi... | 2026-10-28 |
| CVE-2026-55240 | critical | 9.1 | No | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, formatString() in src/server/utils/temp... | 2026-10-28 |
| CVE-2026-54162 | medium | 4.7 | No | Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy... | 2026-10-28 |
| CVE-2026-54683 | medium | 6.5 | No | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and... | 2026-10-28 |
| CVE-2026-50659 | medium | 6.5 | No | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | 2026-10-28 |
| CVE-2026-50651 | high | 7.5 | No | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-50650 | high | 7.8 | No | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-50649 | high | 7.8 | No | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-50648 | high | 7.5 | No | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-50646 | high | 7.8 | No | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-50528 | high | 8.2 | No | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-28 |
| CVE-2026-50527 | high | 7.5 | No | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-50526 | medium | 5.5 | No | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. | 2026-10-28 |
| CVE-2026-50525 | high | 7.5 | No | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-50524 | high | 7.5 | No | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. | 2026-10-28 |