Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82891 | high | 8.1 | No | IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptog... | 2026-10-23 |
| CVE-2026-76587 | high | 8.8 | No | IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could ov... | 2026-10-23 |
| CVE-2026-66279 | not reported | — | No | In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resultin... | 2026-10-23 |
| CVE-2026-113461 | not reported | — | No | Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle hom... | 2026-10-23 |
| CVE-2026-111815 | critical | 10.0 | No | Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed ho... | 2026-10-23 |
| CVE-2026-111814 | critical | 10.0 | No | Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one client certificate for... | 2026-10-23 |
| CVE-2026-111812 | critical | 10.0 | No | Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own c... | 2026-10-23 |
| CVE-2026-111184 | high | 7.8 | No | NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to... | 2026-10-23 |
| CVE-2026-111183 | critical | 9.8 | No | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute... | 2026-10-23 |
| CVE-2026-101500 | medium | 6.5 | No | Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extens... | 2026-10-23 |
| CVE-2026-101482 | high | 7.8 | No | Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19... | 2026-10-23 |
| CVE-2026-101481 | high | 8.8 | No | Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19... | 2026-10-23 |
| CVE-2026-96293 | not reported | — | No | A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a... | 2026-10-23 |
| CVE-2026-39769 | high | 7.5 | No | Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina... | 2026-10-23 |
| CVE-2026-115516 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-23 |
| CVE-2026-75887 | high | 7.5 | No | A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng`... | 2026-10-23 |
| CVE-2026-75885 | critical | 9.3 | No | A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remo... | 2026-10-23 |
| CVE-2026-108334 | high | 7.4 | No | A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines wh... | 2026-10-23 |
| CVE-2026-96376 | medium | 6.4 | No | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command I... | 2026-10-23 |
| CVE-2026-96355 | critical | 9.1 | No | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affe... | 2026-10-23 |