Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-66042 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-26 |
| CVE-2026-65686 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-26 |
| CVE-2026-65685 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-26 |
| CVE-2026-33446 | critical | 9.8 | No | CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of... | 2026-10-26 |
| CVE-2026-40514 | critical | 9.1 | No | SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encr... | 2026-10-26 |
| CVE-2026-7036 | critical | 9.8 | No | A vulnerability was identified in Tenda i9 1.0.0.5(2204). This vulnerability affects the function R7WebsSecurityHandlerfunction of the compo... | 2026-10-26 |
| CVE-2026-25660 | critical | 9.8 | No | CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypas... | 2026-10-26 |
| CVE-2026-41276 | critical | 9.8 | No | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, this vulnerability allows remote at... | 2026-10-26 |
| CVE-2026-41268 | critical | 9.8 | No | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise is vulnerable to a critical... | 2026-10-26 |
| CVE-2026-41265 | critical | 9.8 | No | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific flaw exists within the... | 2026-10-26 |
| CVE-2026-25874 | critical | 9.8 | No | LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deser... | 2026-10-26 |
| CVE-2026-3960 | critical | 9.8 | No | A critical remote code execution vulnerability exists in the unauthenticated REST API endpoint /99/ImportSQLTable in H2O-3 version 3.46.0.9... | 2026-10-26 |
| CVE-2026-5935 | critical | 9.8 | No | IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitr... | 2026-10-26 |
| CVE-2026-41304 | critical | 9.8 | No | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `cloneServer.json.php` endpoint in the CloneSite plugin constr... | 2026-10-26 |
| CVE-2026-39861 | critical | 10.0 | No | Claude Code is an agentic coding tool. Prior to version 2.1.64, Claude Code's sandbox did not prevent sandboxed processes from creating syml... | 2026-10-26 |
| CVE-2026-32311 | critical | 9.8 | No | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Flowsint a... | 2026-10-26 |
| CVE-2026-41153 | critical | 9.8 | No | In JetBrains Junie before 252.549.29 command execution was possible via malicious project file | 2026-10-26 |
| CVE-2026-6290 | critical | 9.1 | No | Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current... | 2026-10-26 |
| CVE-2026-33808 | critical | 9.1 | No | Impact@fastify/express v4.0.4 and earlier fails to normalize URLs before passing them to Express middleware when Fastify router normalizatio... | 2026-10-26 |
| CVE-2026-27246 | critical | 9.3 | No | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exp... | 2026-10-26 |