Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87698 | medium | 5.5 | No | Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. | 2026-10-27 |
| CVE-2026-87699 | high | 7.8 | No | Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-15999 | high | 7.5 | No | Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in Legion of the Bouncy Castle... | 2026-10-27 |
| CVE-2026-16000 | high | 7.5 | No | Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2... | 2026-10-27 |
| CVE-2026-16001 | high | 7.5 | No | Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an IesEngine constructed withou... | 2026-10-27 |
| CVE-2026-63566 | high | 7.5 | No | Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReassembler) in Legion of the Bounc... | 2026-10-27 |
| CVE-2026-63567 | high | 7.5 | No | Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has... | 2026-10-27 |
| CVE-2026-99090 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against GPU reset The vblan... | 2026-10-27 |
| CVE-2026-107458 | not reported | — | No | Rejected reason: This CVE has been rejected by Upstream, as they failed to create a meaningful exploit | 2026-10-27 |
| CVE-2024-38564 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_C... | 2026-10-27 |
| CVE-2026-63568 | high | 7.5 | No | Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PKMacBuilder) in Legion of the Bouncy Cast... | 2026-10-27 |
| CVE-2026-105987 | not reported | — | No | KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker c... | 2026-10-27 |
| CVE-2026-117569 | high | 7.8 | No | Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows... | 2026-10-27 |
| CVE-2026-117565 | medium | 5.3 | No | Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server f... | 2026-10-27 |
| CVE-2026-117561 | high | 7.8 | No | Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying c... | 2026-10-27 |
| CVE-2026-115408 | medium | 5.5 | No | In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions (`FindMLKEMKeyPair`,... | 2026-10-27 |
| CVE-2026-115216 | not reported | — | No | In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller AP... | 2026-10-27 |
| CVE-2026-113644 | not reported | — | No | In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the... | 2026-10-27 |
| CVE-2026-117530 | medium | 6.7 | No | In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands | 2026-10-27 |
| CVE-2026-116841 | medium | 5.5 | No | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function th... | 2026-10-27 |