Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83520 | high | 8.8 | No | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. | 2026-10-22 |
| CVE-2026-77930 | critical | 9.8 | No | EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating the... | 2026-10-22 |
| CVE-2026-70194 | medium | 6.5 | No | Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-22 |
| CVE-2026-70190 | high | 7.3 | No | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70179 | high | 7.5 | No | Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | 2026-10-22 |
| CVE-2026-70174 | high | 8.8 | No | Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network. | 2026-10-22 |
| CVE-2026-70165 | medium | 6.7 | No | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-70162 | medium | 5.9 | No | A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who succe... | 2026-10-22 |
| CVE-2026-70161 | high | 7.3 | No | Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges l... | 2026-10-22 |
| CVE-2026-70159 | high | 7.5 | No | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-22 |
| CVE-2026-70035 | high | 8.8 | No | Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network. | 2026-10-22 |
| CVE-2026-70007 | high | 8.8 | No | Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. | 2026-10-22 |
| CVE-2026-69651 | high | 7.5 | No | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-22 |
| CVE-2026-66822 | medium | 5.9 | No | Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network. | 2026-10-22 |
| CVE-2026-58280 | high | 7.5 | No | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-22 |
| CVE-2026-113583 | medium | 6.1 | No | Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary... | 2026-10-22 |
| CVE-2026-113411 | medium | 6.3 | No | A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWin... | 2026-10-22 |
| CVE-2026-113394 | high | 7.4 | No | A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainf... | 2026-10-22 |
| CVE-2026-113390 | critical | 9.9 | No | A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/main... | 2026-10-22 |
| CVE-2026-113384 | medium | 4.3 | No | A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social. Executing a manipul... | 2026-10-22 |