Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82119 | critical | 9.8 | No | OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9... | 2026-10-27 |
| CVE-2026-82118 | critical | 9.8 | No | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Ve... | 2026-10-27 |
| CVE-2026-82117 | critical | 9.8 | No | Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Ser... | 2026-10-27 |
| CVE-2026-82116 | critical | 9.8 | No | Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01... | 2026-10-27 |
| CVE-2026-76939 | critical | 9.8 | No | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3... | 2026-10-27 |
| CVE-2026-76938 | critical | 9.8 | No | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Ma... | 2026-10-27 |
| CVE-2026-76937 | critical | 9.4 | No | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3... | 2026-10-27 |
| CVE-2026-76936 | critical | 9.4 | No | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System... | 2026-10-27 |
| CVE-2026-76935 | critical | 9.4 | No | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System... | 2026-10-27 |
| CVE-2026-76934 | critical | 9.8 | No | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System... | 2026-10-27 |
| CVE-2026-76933 | critical | 9.4 | No | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3... | 2026-10-27 |
| CVE-2026-76932 | critical | 9.4 | No | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System... | 2026-10-27 |
| CVE-2026-117472 | medium | 4.3 | No | Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a hard-coded unprefixed... | 2026-10-27 |
| CVE-2026-117471 | medium | 5.4 | No | Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and passed it to t... | 2026-10-27 |
| CVE-2026-117470 | medium | 6.5 | No | Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verification. An unauthenticat... | 2026-10-27 |
| CVE-2026-117469 | medium | 5.4 | No | Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations... | 2026-10-27 |
| CVE-2026-117468 | medium | 6.5 | No | Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An aut... | 2026-10-27 |
| CVE-2026-65631 | not reported | — | No | Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion denial of service by s... | 2026-10-27 |
| CVE-2026-116632 | medium | 5.4 | No | A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing me... | 2026-10-27 |
| CVE-2026-116631 | medium | 5.4 | No | A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if t... | 2026-10-27 |