Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-27243 | critical | 9.3 | No | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exp... | 2026-10-26 |
| CVE-2026-2332 | critical | 9.1 | No | In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techn... | 2026-10-26 |
| CVE-2026-0234 | critical | 9.1 | No | An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Mi... | 2026-10-26 |
| CVE-2026-34865 | critical | 9.1 | No | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confi... | 2026-10-26 |
| CVE-2026-25209 | critical | 9.1 | No | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5... | 2026-10-26 |
| CVE-2026-25207 | critical | 9.8 | No | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b... | 2026-10-26 |
| CVE-2026-25206 | critical | 9.1 | No | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc5... | 2026-10-26 |
| CVE-2026-25205 | critical | 9.8 | No | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash... | 2026-10-26 |
| CVE-2026-40393 | critical | 9.8 | No | In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depen... | 2026-10-26 |
| CVE-2026-6110 | critical | 9.8 | No | A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of the file metagpt/stra... | 2026-10-26 |
| CVE-2026-40190 | critical | 9.8 | No | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.5.18, the LangSmith JavaScript/TypeScript SDK (l... | 2026-10-26 |
| CVE-2026-33707 | critical | 9.8 | No | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default password reset mechanism generates tokens using sh... | 2026-10-26 |
| CVE-2026-33698 | critical | 9.8 | No | Chamilo LMS is a learning management system. Prior to 1.11.38, a chained attack can enable otherwise-blocked PHP code from the main/install/... | 2026-10-26 |
| CVE-2026-5483 | critical | 9.9 | No | A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOA... | 2026-10-26 |
| CVE-2026-6024 | critical | 9.8 | No | A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfunction of the compon... | 2026-10-26 |
| CVE-2026-40154 | critical | 9.6 | No | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI treats remotely fetched template files as trusted executable code witho... | 2026-10-26 |
| CVE-2026-40114 | critical | 10.0 | No | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the /api/v1/runs endpoint accepts an arbitrary webhook_url in the request body wi... | 2026-10-26 |
| CVE-2026-5974 | critical | 9.8 | No | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt... | 2026-10-26 |
| CVE-2026-5972 | critical | 9.8 | No | A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.run_command in the library... | 2026-10-26 |
| CVE-2026-5971 | critical | 9.8 | No | A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the file metag... | 2026-10-26 |