Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110243 | critical | 9.9 | No | The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its lin... | 2026-10-23 |
| CVE-2026-107861 | critical | 9.9 | No | The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device nami... | 2026-10-23 |
| CVE-2026-96616 | medium | 6.5 | No | Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session li... | 2026-10-23 |
| CVE-2026-111100 | medium | 5.3 | No | The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated pa... | 2026-10-23 |
| CVE-2026-109122 | critical | 9.1 | No | The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes... | 2026-10-23 |
| CVE-2026-105265 | medium | 5.3 | No | A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to ca... | 2026-10-23 |
| CVE-2026-13599 | high | 7.8 | No | Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0. | 2026-10-23 |
| CVE-2026-69673 | high | 7.8 | No | Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally... | 2026-10-23 |
| CVE-2026-69718 | high | 7.8 | No | Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to eleva... | 2026-10-23 |
| CVE-2026-69733 | high | 7.8 | No | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. | 2026-10-23 |
| CVE-2026-108132 | high | 7.0 | No | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 2026-10-23 |
| CVE-2026-108135 | high | 7.0 | No | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges... | 2026-10-23 |
| CVE-2026-115754 | medium | 4.7 | No | serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attackers to break out of HTML script... | 2026-10-23 |
| CVE-2026-16762 | not reported | — | No | An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during... | 2026-10-23 |
| CVE-2026-115657 | not reported | — | No | When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions before 5.8.4 log configured cre... | 2026-10-23 |
| CVE-2026-53942 | critical | 9.9 | No | Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub Actions Pwn Request... | 2026-10-23 |
| CVE-2026-55889 | not reported | — | No | XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.Retri... | 2026-10-23 |
| CVE-2026-86020 | medium | 4.6 | No | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB contains a spreadsheet for... | 2026-10-23 |
| CVE-2026-54615 | not reported | — | No | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, LogEntryExtraFormatter builds the... | 2026-10-23 |
| CVE-2026-108136 | high | 7.8 | No | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-23 |