Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-98919 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjust_idledly() against divide-by-zero and overflow ad... | 2026-10-23 |
| CVE-2026-98918 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()... | 2026-10-23 |
| CVE-2023-4548 | critical | 9.8 | No | A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the com... | 2026-10-23 |
| CVE-2026-98871 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path __sev_pla... | 2026-10-23 |
| CVE-2026-92209 | high | 7.8 | No | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate priv... | 2026-10-23 |
| CVE-2026-92208 | high | 8.8 | No | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execu... | 2026-10-23 |
| CVE-2026-92183 | high | 7.8 | No | GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut... | 2026-10-23 |
| CVE-2026-92559 | critical | 9.8 | No | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unre... | 2026-10-23 |
| CVE-2026-89410 | not reported | — | No | In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information. | 2026-10-23 |
| CVE-2026-87351 | high | 8.8 | No | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3... | 2026-10-23 |
| CVE-2026-82891 | high | 8.1 | No | IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptog... | 2026-10-23 |
| CVE-2026-76587 | high | 8.8 | No | IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could ov... | 2026-10-23 |
| CVE-2026-66279 | not reported | — | No | In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resultin... | 2026-10-23 |
| CVE-2026-113461 | not reported | — | No | Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle hom... | 2026-10-23 |
| CVE-2026-111815 | critical | 10.0 | No | Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed ho... | 2026-10-23 |
| CVE-2026-111814 | critical | 10.0 | No | Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one client certificate for... | 2026-10-23 |
| CVE-2026-111812 | critical | 10.0 | No | Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own c... | 2026-10-23 |
| CVE-2026-111184 | high | 7.8 | No | NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to... | 2026-10-23 |
| CVE-2026-111183 | critical | 9.8 | No | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute... | 2026-10-23 |
| CVE-2026-101500 | medium | 6.5 | No | Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extens... | 2026-10-23 |