Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-54611 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-27 |
| CVE-2024-54610 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-27 |
| CVE-2024-54609 | not reported | — | No | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | 2026-10-27 |
| CVE-2026-76281 | medium | — | No | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revie... | 2026-10-27 |
| CVE-2026-39928 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 |
| CVE-2026-116775 | not reported | — | No | pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate with a running Pageant... | 2026-10-27 |
| CVE-2026-116696 | low | 3.3 | No | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, russh::keys::agent::serve... | 2026-10-27 |
| CVE-2026-111379 | high | 7.3 | No | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt... | 2026-10-27 |
| CVE-2026-112906 | medium | 4.7 | No | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observat... | 2026-10-27 |
| CVE-2026-112909 | medium | 6.1 | No | filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path... | 2026-10-27 |
| CVE-2026-112402 | high | 7.5 | No | Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allo... | 2026-10-27 |
| CVE-2026-112401 | high | 7.5 | No | Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._see... | 2026-10-27 |
| CVE-2026-112400 | high | 7.5 | No | Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exceptio... | 2026-10-27 |
| CVE-2026-112398 | critical | 9.8 | No | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated ti... | 2026-10-27 |
| CVE-2026-112397 | high | 7.5 | No | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-wi... | 2026-10-27 |
| CVE-2026-19621 | medium | 6.5 | No | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from p... | 2026-10-27 |
| CVE-2026-19600 | medium | 4.9 | No | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before... | 2026-10-27 |
| CVE-2026-19076 | medium | 4.9 | No | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to reject OAuth application sessions in th... | 2026-10-27 |
| CVE-2026-106456 | medium | 6.5 | No | Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-backend package is affec... | 2026-10-27 |
| CVE-2026-106457 | high | 8.1 | No | Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backend-module-cloudflare-... | 2026-10-27 |