Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116726 | low | 3.3 | No | Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scan... | 2026-10-27 |
| CVE-2026-116723 | high | 7.8 | No | FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack... | 2026-10-27 |
| CVE-2026-108464 | high | 7.0 | No | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-108467 | high | 8.8 | No | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. | 2026-10-27 |
| CVE-2026-65213 | medium | 6.6 | No | This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC | 2026-10-27 |
| CVE-2026-65211 | high | 7.2 | No | This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC... | 2026-10-27 |
| CVE-2026-65220 | high | 8.8 | No | A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to admini... | 2026-10-27 |
| CVE-2026-65219 | high | 7.4 | No | A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an... | 2026-10-27 |
| CVE-2026-65210 | medium | 4.9 | No | This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond th... | 2026-10-27 |
| CVE-2026-18451 | low | 3.1 | No | The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker... | 2026-10-27 |
| CVE-2026-18450 | critical | 9.8 | No | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that ex... | 2026-10-27 |
| CVE-2026-18449 | high | 7.5 | No | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that ex... | 2026-10-27 |
| CVE-2026-16521 | high | 7.2 | No | An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC fu... | 2026-10-27 |
| CVE-2026-109453 | high | 7.0 | No | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-91768 | medium | 6.5 | No | The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients mat... | 2026-10-27 |
| CVE-2026-69577 | high | 7.5 | No | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose... | 2026-10-27 |
| CVE-2026-69789 | high | 7.5 | No | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent... | 2026-10-27 |
| CVE-2026-92842 | medium | 5.9 | No | The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars opti... | 2026-10-27 |
| CVE-2026-100749 | medium | 4.3 | No | Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopp... | 2026-10-27 |
| CVE-2026-69802 | high | 8.1 | No | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. | 2026-10-27 |