Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87102 | high | 7.4 | No | Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Prote... | 2026-10-29 |
| CVE-2026-86385 | high | 8.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability.... | 2026-10-29 |
| CVE-2026-86384 | critical | 9.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-86380 | high | 7.2 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-81472 | medium | 4.2 | No | Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versio... | 2026-10-29 |
| CVE-2026-86378 | high | 8.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-86379 | high | 7.2 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-29 |
| CVE-2026-85898 | high | 8.8 | No | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute... | 2026-10-29 |
| CVE-2026-83831 | high | 8.8 | No | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 2026-10-29 |
| CVE-2026-86018 | not reported | — | No | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users... | 2026-10-29 |
| CVE-2026-66092 | not reported | — | No | In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logon page without encoding or sanitisation.... | 2026-10-29 |
| CVE-2026-66091 | not reported | — | No | In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisation check. An unauthent... | 2026-10-29 |
| CVE-2026-78674 | high | 8.8 | No | The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated users to submit crafted requests that can le... | 2026-10-29 |
| CVE-2026-76418 | high | 8.6 | No | A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Fi... | 2026-10-29 |
| CVE-2026-6647 | high | 7.4 | No | In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sensitive database for identity data, mismat... | 2026-10-29 |
| CVE-2026-74580 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->met... | 2026-10-29 |
| CVE-2026-66090 | not reported | — | No | In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user permitted to create... | 2026-10-29 |
| CVE-2026-66089 | not reported | — | No | In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves external entities. This... | 2026-10-29 |
| CVE-2026-66088 | not reported | — | No | In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating system commands withou... | 2026-10-29 |
| CVE-2026-57210 | not reported | — | No | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trusted_proxies opti... | 2026-10-29 |