Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-18526 | not reported | — | No | HumHub Community Edition 1.18.4 and 1.18.4-pl1 contain a stored Cross-Site Scripting (XSS) vulnerability in the oEmbed confirmation renderin... | 2026-10-27 |
| CVE-2026-16816 | critical | 9.9 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neut... | 2026-10-27 |
| CVE-2026-16814 | high | 8.8 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow. | 2026-10-27 |
| CVE-2026-16706 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write. | 2026-10-27 |
| CVE-2026-16703 | high | 7.8 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management. | 2026-10-27 |
| CVE-2026-16690 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consum... | 2026-10-27 |
| CVE-2026-16686 | high | 8.2 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authenticatio... | 2026-10-27 |
| CVE-2026-16656 | critical | 9.8 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication. | 2026-10-27 |
| CVE-2026-15078 | high | 8.1 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper v... | 2026-10-27 |
| CVE-2026-15068 | critical | 9.9 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper... | 2026-10-27 |
| CVE-2026-15065 | critical | 9.1 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of inter... | 2026-10-27 |
| CVE-2026-15061 | high | 8.2 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path t... | 2026-10-27 |
| CVE-2026-14970 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow. | 2026-10-27 |
| CVE-2026-65612 | not reported | — | No | nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or in... | 2026-10-27 |
| CVE-2026-65611 | not reported | — | No | nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted... | 2026-10-27 |
| CVE-2026-65610 | not reported | — | No | nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execu... | 2026-10-27 |
| CVE-2026-65609 | not reported | — | No | nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a se... | 2026-10-27 |
| CVE-2026-51367 | high | 7.5 | No | An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat endpoin... | 2026-10-27 |
| CVE-2026-75589 | high | 7.5 | No | Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify... | 2026-10-27 |
| CVE-2026-72889 | critical | 9.8 | No | Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method... | 2026-10-27 |