Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116591 | not reported | — | No | compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted t... | 2026-10-27 |
| CVE-2026-116579 | medium | 5.9 | No | Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBr... | 2026-10-27 |
| CVE-2026-110720 | critical | 9.9 | No | Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow... | 2026-10-27 |
| CVE-2026-116840 | medium | 6.1 | No | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size chec... | 2026-10-27 |
| CVE-2026-105006 | medium | 6.4 | No | Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. | 2026-10-27 |
| CVE-2026-108458 | high | 8.8 | No | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 2026-10-27 |
| CVE-2026-116727 | low | 3.3 | No | gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM command stream without bo... | 2026-10-27 |
| CVE-2026-116726 | low | 3.3 | No | Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scan... | 2026-10-27 |
| CVE-2026-116723 | high | 7.8 | No | FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attackers to corrupt stack... | 2026-10-27 |
| CVE-2026-108464 | high | 7.0 | No | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-108467 | high | 8.8 | No | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. | 2026-10-27 |
| CVE-2026-109453 | high | 7.0 | No | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-91768 | medium | 6.5 | No | The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients mat... | 2026-10-27 |
| CVE-2026-69577 | high | 7.5 | No | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose... | 2026-10-27 |
| CVE-2026-69789 | high | 7.5 | No | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent... | 2026-10-27 |
| CVE-2026-92842 | medium | 5.9 | No | The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars opti... | 2026-10-27 |
| CVE-2026-100749 | medium | 4.3 | No | Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopp... | 2026-10-27 |
| CVE-2026-69802 | high | 8.1 | No | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. | 2026-10-27 |
| CVE-2026-28167 | high | 7.5 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebRehab Super Forms super-forms allows Path... | 2026-10-27 |
| CVE-2026-116826 | medium | 6.8 | No | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that allows authenticated ad... | 2026-10-27 |