Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-13739 | critical | 9.8 | No | A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of... | 2026-10-23 |
| CVE-2026-13738 | critical | 9.8 | No | CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrad... | 2026-10-23 |
| CVE-2026-13737 | critical | 9.8 | No | CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved main... | 2026-10-23 |
| CVE-2026-42018 | high | 7.5 | Listed | JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially... | 2026-10-23 |
| CVE-2026-98090 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout btrfs_init_n... | 2026-10-23 |
| CVE-2026-98094 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_lock IRQ-safe fbtft_mkdirty() can be reache... | 2026-10-23 |
| CVE-2026-98091 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from transaction update list When c... | 2026-10-23 |
| CVE-2026-98092 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() acp6x_pdm_dma_... | 2026-10-23 |
| CVE-2026-98093 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/disable hw_params() enables mclk... | 2026-10-23 |
| CVE-2026-110804 | medium | 4.3 | No | Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenti... | 2026-10-23 |
| CVE-2026-110805 | low | 2.6 | No | Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged u... | 2026-10-23 |
| CVE-2026-110806 | medium | 6.5 | No | Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permis... | 2026-10-23 |
| CVE-2026-110287 | medium | 4.3 | No | Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edi... | 2026-10-23 |
| CVE-2026-83862 | high | 8.8 | No | Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network. | 2026-10-23 |
| CVE-2026-98095 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header... | 2026-10-23 |
| CVE-2026-68836 | high | 7.8 | No | Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. | 2026-10-23 |
| CVE-2026-69326 | high | 8.8 | No | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | 2026-10-23 |
| CVE-2026-69354 | high | 7.8 | No | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-23 |
| CVE-2026-69363 | high | 8.0 | No | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. | 2026-10-23 |
| CVE-2026-69387 | high | 7.0 | No | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-23 |