Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113436 | not reported | — | No | Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to... | 2026-10-26 |
| CVE-2026-112880 | not reported | — | No | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in hackney_http_connect in benoi... | 2026-10-26 |
| CVE-2026-111103 | not reported | — | No | Improper Cleanup on Thrown Exception vulnerability in the HTTP/2 handler of mtrudel bandit allows an unauthenticated remote attacker to bypa... | 2026-10-26 |
| CVE-2026-111101 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body reader of mtrudel bandit allows an unauthent... | 2026-10-26 |
| CVE-2026-110499 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated... | 2026-10-26 |
| CVE-2026-109584 | not reported | — | No | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unau... | 2026-10-26 |
| CVE-2026-108529 | not reported | — | No | Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to... | 2026-10-26 |
| CVE-2026-108525 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated... | 2026-10-26 |
| CVE-2026-59106 | critical | 9.8 | No | A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input... | 2026-10-26 |
| CVE-2026-114820 | critical | 9.1 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).... | 2026-10-26 |
| CVE-2026-94386 | medium | 4.8 | No | Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component. This issue affects Apache Camel: from 4.19.0 b... | 2026-10-26 |
| CVE-2026-90885 | high | 7.5 | No | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component. This issue affects Apache Camel: from... | 2026-10-26 |
| CVE-2026-116516 | medium | 6.5 | No | Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attac... | 2026-10-26 |
| CVE-2026-116012 | low | 3.6 | No | Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that... | 2026-10-26 |
| CVE-2026-59116 | medium | 6.8 | No | Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over... | 2026-10-26 |
| CVE-2026-61931 | high | 7.8 | No | Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-62687 | medium | 5.5 | No | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose informatio... | 2026-10-26 |
| CVE-2026-62879 | medium | 5.5 | No | Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. | 2026-10-26 |
| CVE-2026-69596 | high | 7.0 | No | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-69633 | high | 7.8 | No | Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. | 2026-10-26 |