Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-50659 | medium | 6.5 | No | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | 2026-10-28 |
| CVE-2026-50651 | high | 7.5 | No | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-50650 | high | 7.8 | No | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-50649 | high | 7.8 | No | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-50648 | high | 7.5 | No | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-50646 | high | 7.8 | No | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-50528 | high | 8.2 | No | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-28 |
| CVE-2026-50527 | high | 7.5 | No | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-50526 | medium | 5.5 | No | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. | 2026-10-28 |
| CVE-2026-50525 | high | 7.5 | No | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-50524 | high | 7.5 | No | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-50053 | high | 8.7 | No | A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests to /h/* to populate servlet a... | 2026-10-28 |
| CVE-2026-4952 | not reported | — | No | The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to define a business r... | 2026-10-28 |
| CVE-2026-4951 | not reported | — | No | The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defi... | 2026-10-28 |
| CVE-2026-4950 | not reported | — | No | The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined comp... | 2026-10-28 |
| CVE-2026-47304 | critical | 9.8 | No | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-28 |
| CVE-2026-47303 | high | 8.8 | No | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | 2026-10-28 |
| CVE-2026-47302 | high | 7.5 | No | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-28 |
| CVE-2026-47300 | high | 8.8 | No | Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | 2026-10-28 |
| CVE-2026-42020 | critical | 9.1 | No | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-G... | 2026-10-28 |