Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-15068 | critical | 9.9 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary commands due to improper... | 2026-10-27 |
| CVE-2026-15065 | critical | 9.1 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of inter... | 2026-10-27 |
| CVE-2026-15061 | high | 8.2 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path t... | 2026-10-27 |
| CVE-2026-14970 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow. | 2026-10-27 |
| CVE-2026-65612 | not reported | — | No | nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or in... | 2026-10-27 |
| CVE-2026-65611 | not reported | — | No | nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted... | 2026-10-27 |
| CVE-2026-65610 | not reported | — | No | nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execu... | 2026-10-27 |
| CVE-2026-65609 | not reported | — | No | nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a se... | 2026-10-27 |
| CVE-2026-51367 | high | 7.5 | No | An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat endpoin... | 2026-10-27 |
| CVE-2026-75589 | high | 7.5 | No | Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify... | 2026-10-27 |
| CVE-2026-72889 | critical | 9.8 | No | Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method... | 2026-10-27 |
| CVE-2026-58088 | high | 7.4 | No | The ELF core dump code counted the number of dumpable VM map entries, allocated a buffer for the corresponding program headers, then iterate... | 2026-10-27 |
| CVE-2026-58087 | high | 7.8 | No | The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock protecting the set, alloca... | 2026-10-27 |
| CVE-2026-58086 | high | 8.1 | No | As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. Tracing configured by a jail... | 2026-10-27 |
| CVE-2026-58085 | high | 7.5 | No | After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the MAC verification step su... | 2026-10-27 |
| CVE-2026-58084 | medium | 5.5 | No | To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the current time for the timer's clock. For a time... | 2026-10-27 |
| CVE-2026-58083 | high | 8.4 | No | While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list be... | 2026-10-27 |
| CVE-2026-58082 | critical | 9.8 | No | The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character output. Some ISO-2022 variants can... | 2026-10-27 |
| CVE-2026-58081 | critical | 9.8 | No | Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before wri... | 2026-10-27 |
| CVE-2026-49425 | medium | 5.5 | No | The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct... | 2026-10-27 |