Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-66756 | critical | 9.8 | No | Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1.... | 2026-10-23 |
| CVE-2026-12118 | critical | 9.8 | No | IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due... | 2026-10-23 |
| CVE-2026-4978 | critical | 9.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System al... | 2026-10-23 |
| CVE-2026-14522 | critical | 9.8 | No | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary com... | 2026-10-23 |
| CVE-2026-17544 | critical | 9.8 | No | Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8... | 2026-10-23 |
| CVE-2026-17543 | critical | 9.8 | No | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2... | 2026-10-23 |
| CVE-2026-48449 | critical | 9.8 | No | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the co... | 2026-10-23 |
| CVE-2026-46749 | critical | 9.8 | No | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implem... | 2026-10-23 |
| CVE-2026-5300 | critical | 9.1 | No | Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensiti... | 2026-10-23 |
| CVE-2025-40938 | critical | 9.8 | No | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firm... | 2026-10-23 |
| CVE-2025-11367 | critical | 9.8 | No | The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization | 2026-10-23 |
| CVE-2025-11366 | critical | 9.8 | No | N-central < 2025.4 is vulnerable to authentication bypass via path traversal | 2026-10-23 |
| CVE-2025-34282 | critical | 9.1 | No | ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An... | 2026-10-23 |
| CVE-2025-40594 | critical | 9.8 | No | A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS... | 2026-10-23 |
| CVE-2025-6519 | critical | 9.8 | No | E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictab... | 2026-10-23 |
| CVE-2025-34522 | critical | 9.8 | No | A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve Unified Data Protection (UDP). This flaw can be tri... | 2026-10-23 |
| CVE-2025-71433 | high | 7.5 | No | Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying pr... | 2026-10-23 |
| CVE-2025-57739 | high | 8.8 | No | An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet For... | 2026-10-23 |
| CVE-2026-97301 | medium | 6.5 | No | Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions. | 2026-10-23 |
| CVE-2026-18577 | high | 8.1 | Listed | An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1 | 2026-10-23 |