Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101034 | not reported | — | No | An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords st... | 2026-10-27 |
| CVE-2026-116801 | medium | 4.3 | No | Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo relation queries, so... | 2026-10-27 |
| CVE-2026-116591 | not reported | — | No | compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted t... | 2026-10-27 |
| CVE-2026-116579 | medium | 5.9 | No | Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBr... | 2026-10-27 |
| CVE-2026-110720 | critical | 9.9 | No | Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow... | 2026-10-27 |
| CVE-2026-116840 | medium | 6.1 | No | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size chec... | 2026-10-27 |
| CVE-2026-105006 | medium | 6.4 | No | Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. | 2026-10-27 |
| CVE-2026-108458 | high | 8.8 | No | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 2026-10-27 |
| CVE-2026-116727 | low | 3.3 | No | gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM command stream without bo... | 2026-10-27 |
| CVE-2026-116726 | low | 3.3 | No | Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scan... | 2026-10-27 |
| CVE-2026-116723 | high | 7.8 | No | FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack... | 2026-10-27 |
| CVE-2026-108464 | high | 7.0 | No | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-108467 | high | 8.8 | No | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. | 2026-10-27 |
| CVE-2026-65213 | medium | 6.6 | No | This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC | 2026-10-27 |
| CVE-2026-65211 | high | 7.2 | No | This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC... | 2026-10-27 |
| CVE-2026-65220 | high | 8.8 | No | A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to admini... | 2026-10-27 |
| CVE-2026-65219 | high | 7.4 | No | A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an... | 2026-10-27 |
| CVE-2026-65210 | medium | 4.9 | No | This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond th... | 2026-10-27 |
| CVE-2026-18451 | low | 3.1 | No | The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker... | 2026-10-27 |
| CVE-2026-18450 | critical | 9.8 | No | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that ex... | 2026-10-27 |