Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-98938 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: rust: irq: pass RegistrationInner as cookie to request_irq With commit... | 2026-10-23 |
| CVE-2026-98930 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix IRQ injection with SIGP Stop and Store Status When __in... | 2026-10-23 |
| CVE-2026-98929 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: macsec: initialize SecY before registering the netdevice Creating a MA... | 2026-10-23 |
| CVE-2026-98928 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 pkvm_... | 2026-10-23 |
| CVE-2026-98925 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copied_seq double-counting When a BPF... | 2026-10-23 |
| CVE-2026-98924 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: fs: avoid repeated scans in evict_inodes() We observed hung tasks when... | 2026-10-23 |
| CVE-2026-98923 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: arm64: io: Reject non-user protection in ioremap_prot() Mapping a stac... | 2026-10-23 |
| CVE-2026-98922 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: net: emac: move setting of netops to fix crash fixes the following cra... | 2026-10-23 |
| CVE-2026-98921 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_do_mkdir() debug print ovl_do_mkdir() prints the i... | 2026-10-23 |
| CVE-2026-98920 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit... | 2026-10-23 |
| CVE-2026-98919 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjust_idledly() against divide-by-zero and overflow ad... | 2026-10-23 |
| CVE-2026-98918 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()... | 2026-10-23 |
| CVE-2023-4548 | critical | 9.8 | No | A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the com... | 2026-10-23 |
| CVE-2026-98871 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path __sev_pla... | 2026-10-23 |
| CVE-2026-92209 | high | 7.8 | No | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate priv... | 2026-10-23 |
| CVE-2026-92208 | high | 8.8 | No | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execu... | 2026-10-23 |
| CVE-2026-92183 | high | 7.8 | No | GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut... | 2026-10-23 |
| CVE-2026-92559 | critical | 9.8 | No | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unre... | 2026-10-23 |
| CVE-2026-89410 | not reported | — | No | In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information. | 2026-10-23 |
| CVE-2026-87351 | high | 8.8 | No | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3... | 2026-10-23 |