Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-17436 | critical | 9.8 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow. | 2026-10-26 |
| CVE-2026-17423 | critical | 9.1 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service du... | 2026-10-26 |
| CVE-2026-19586 | critical | 9.8 | No | A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due... | 2026-10-26 |
| CVE-2026-75595 | critical | 9.1 | No | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClient... | 2026-10-26 |
| CVE-2026-111811 | critical | 9.0 | No | Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the shared proxy cache.... | 2026-10-26 |
| CVE-2026-111816 | critical | 9.3 | No | Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chu... | 2026-10-26 |
| CVE-2026-111813 | critical | 10.0 | No | Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsi... | 2026-10-26 |
| CVE-2026-20236 | high | 7.5 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering te... | 2026-10-26 |
| CVE-2026-20043 | critical | 9.0 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering te... | 2026-10-26 |
| CVE-2026-98945 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window dur... | 2026-10-26 |
| CVE-2026-98942 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Build the cid tables privately and publish them with RCU Th... | 2026-10-26 |
| CVE-2026-98937 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: perf/core: Check kernel access when kernel callchains are requested pe... | 2026-10-26 |
| CVE-2026-98926 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS [Why] stream->sink is opt... | 2026-10-26 |
| CVE-2026-98917 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: parisc: Increase kernel stack size to 32kb For 64-bit Linux kernels, i... | 2026-10-26 |
| CVE-2026-98916 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color change When trying to... | 2026-10-26 |
| CVE-2026-98915 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device on driver removal Th... | 2026-10-26 |
| CVE-2026-98914 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 lev... | 2026-10-26 |
| CVE-2026-98913 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf_probe() cavium_ptp_get... | 2026-10-26 |
| CVE-2026-98912 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_os... | 2026-10-26 |
| CVE-2026-98911 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() In case of an er... | 2026-10-26 |