Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-31026 | critical | 9.8 | No | An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat i... | 2026-10-27 |
| CVE-2026-109256 | medium | 6.5 | No | FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the buffer after a reall... | 2026-10-27 |
| CVE-2026-109257 | high | 7.5 | No | FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a pa... | 2026-10-27 |
| CVE-2026-105007 | high | 8.8 | No | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length... | 2026-10-27 |
| CVE-2026-105008 | critical | 9.0 | No | No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. | 2026-10-27 |
| CVE-2026-102675 | high | 7.4 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, an... | 2026-10-27 |
| CVE-2026-76473 | critical | 9.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim... | 2026-10-27 |
| CVE-2026-18330 | not reported | — | No | A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same RSA-1024 private key is stored within fir... | 2026-10-27 |
| CVE-2026-14255 | medium | 5.5 | No | A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malici... | 2026-10-27 |
| CVE-2026-111054 | not reported | — | No | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-112374. Reason: This candidate is a duplicate of CVE-20... | 2026-10-27 |
| CVE-2026-60814 | low | 3.9 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... | 2026-10-27 |
| CVE-2026-98141 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data()... | 2026-10-27 |
| CVE-2026-60819 | low | 3.7 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported version... | 2026-10-27 |
| CVE-2026-101388 | high | 7.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affecte... | 2026-10-27 |
| CVE-2026-101389 | medium | 5.9 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... | 2026-10-27 |
| CVE-2026-101390 | high | 8.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... | 2026-10-27 |
| CVE-2024-14042 | medium | 6.3 | No | A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr_cb of the file src/... | 2026-10-27 |
| CVE-2024-6541 | medium | 6.8 | No | The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This a... | 2026-10-27 |
| CVE-2024-39024 | high | 8.8 | No | In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution. | 2026-10-27 |
| CVE-2024-8995 | medium | 4.9 | No | Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persis... | 2026-10-27 |