Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-60662 | high | 7.8 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily... | 2026-10-27 |
| CVE-2026-60453 | medium | 5.3 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4.... | 2026-10-27 |
| CVE-2026-47025 | high | 8.8 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4.... | 2026-10-27 |
| CVE-2026-91767 | medium | 6.5 | No | php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate... | 2026-10-27 |
| CVE-2026-52834 | high | 7.3 | No | jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform... | 2026-10-27 |
| CVE-2026-49255 | high | 8.8 | No | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm constructs operating sy... | 2026-10-27 |
| CVE-2026-49253 | high | 7.1 | No | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm uses remote-supplied fi... | 2026-10-27 |
| CVE-2026-45742 | high | 7.5 | No | Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext function in pkg/modules/api/context.go s... | 2026-10-27 |
| CVE-2026-45741 | high | 7.5 | No | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPublicIP function in pkg/gotenberg/outbound.go does... | 2026-10-27 |
| CVE-2026-44829 | high | 8.8 | No | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename handling in pkg/modules/api/context.go uses filep... | 2026-10-27 |
| CVE-2026-40509 | medium | 4.3 | No | OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The web_path GET parameter in the DICOM viewer... | 2026-10-27 |
| CVE-2026-40508 | medium | 5.4 | No | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenti... | 2026-10-27 |
| CVE-2026-40507 | medium | 6.1 | No | OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml... | 2026-10-27 |
| CVE-2026-18756 | not reported | — | No | HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in the Space membership-request workflow. An attacke... | 2026-10-27 |
| CVE-2026-16818 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consum... | 2026-10-27 |
| CVE-2026-16817 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference. | 2026-10-27 |
| CVE-2026-76234 | high | 7.5 | No | libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not... | 2026-10-27 |
| CVE-2026-63937 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer... | 2026-10-27 |
| CVE-2026-63927 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to deref... | 2026-10-27 |
| CVE-2026-63925 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN wrap In macsec_post_decr... | 2026-10-27 |