Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-98119 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write when netfs_alloc_subrequest() fails syzb... | 2026-10-26 |
| CVE-2026-98120 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref leak in netfs_unbuffer... | 2026-10-26 |
| CVE-2026-98140 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths wri... | 2026-10-26 |
| CVE-2026-98143 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits... | 2026-10-26 |
| CVE-2026-72758 | high | 7.5 | No | When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will ne... | 2026-10-26 |
| CVE-2026-72757 | medium | 5.3 | No | Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving the HTTP server unavai... | 2026-10-26 |
| CVE-2026-72756 | high | 7.5 | No | Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as too long file names,... | 2026-10-26 |
| CVE-2026-72755 | low | 3.8 | No | Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificat... | 2026-10-26 |
| CVE-2026-72754 | high | 7.5 | No | When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters a CRL file with the wrong enc... | 2026-10-26 |
| CVE-2026-72753 | high | 8.2 | No | When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to... | 2026-10-26 |
| CVE-2026-72752 | medium | 6.5 | No | Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be triggered maliciously by an a... | 2026-10-26 |
| CVE-2026-116408 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photobloc... | 2026-10-26 |
| CVE-2026-116400 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block all... | 2026-10-26 |
| CVE-2026-116398 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Content Slider Block content-... | 2026-10-26 |
| CVE-2026-115966 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Typing Text – Give your texts... | 2026-10-26 |
| CVE-2026-112839 | medium | 4.3 | No | Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Config... | 2026-10-26 |
| CVE-2026-111404 | low | 3.7 | No | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme Photo Reviews for Wo... | 2026-10-26 |
| CVE-2026-116403 | medium | 5.9 | No | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Awesomemotive Easy Digital Down... | 2026-10-26 |
| CVE-2026-116396 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Amelia ameliabooking allows Stored... | 2026-10-26 |
| CVE-2026-116395 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins LightBox Block lightbox-block... | 2026-10-26 |