Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-117859 | medium | 5.4 | No | A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue occurs when an authent... | 2026-10-29 |
| CVE-2026-117688 | medium | 5.3 | No | A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution. When a vault prov... | 2026-10-29 |
| CVE-2026-117627 | medium | 5.4 | No | A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Google identity provider... | 2026-10-29 |
| CVE-2026-117548 | medium | 6.5 | No | A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema ali... | 2026-10-29 |
| CVE-2024-3727 | high | 8.3 | No | A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesse... | 2026-10-29 |
| CVE-2024-3056 | high | 7.7 | No | A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same... | 2026-10-29 |
| CVE-2024-1394 | high | 7.5 | No | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using... | 2026-10-29 |
| CVE-2026-87853 | high | 7.5 | No | A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strn... | 2026-10-29 |
| CVE-2026-5260 | high | 8.2 | No | A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server usin... | 2026-10-29 |
| CVE-2026-58014 | high | 8.6 | No | A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loadin... | 2026-10-29 |
| CVE-2026-42013 | high | 8.2 | No | A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to... | 2026-10-29 |
| CVE-2026-42012 | high | 7.1 | No | A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains U... | 2026-10-29 |
| CVE-2026-42011 | high | 7.4 | No | A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate... | 2026-10-29 |
| CVE-2026-15564 | high | 7.4 | No | Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to t... | 2026-10-29 |
| CVE-2026-114488 | high | 7.4 | No | A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts I... | 2026-10-29 |
| CVE-2026-109618 | critical | 9.8 | Listed | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not prope... | 2026-10-29 |
| CVE-2024-9355 | medium | 6.5 | No | A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variabl... | 2026-10-29 |
| CVE-2026-102010 | high | 7.0 | No | A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocat... | 2026-10-29 |
| CVE-2026-94346 | high | 7.2 | No | PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,... | 2026-10-29 |
| CVE-2026-92709 | high | 8.1 | No | Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allow... | 2026-10-29 |