Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-0264 | critical | 9.8 | No | A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated at... | 2026-10-26 |
| CVE-2026-0263 | critical | 9.8 | No | A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attac... | 2026-10-26 |
| CVE-2026-97200 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in hackney_conn in benoitc hackney allows a malicious HTTP server to exha... | 2026-10-26 |
| CVE-2026-115269 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthentic... | 2026-10-26 |
| CVE-2026-114216 | not reported | — | No | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in the HTTP/1.1 chunked body reader of mtrude... | 2026-10-26 |
| CVE-2026-114213 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassembly of mtrudel bandit allows an unauthen... | 2026-10-26 |
| CVE-2026-113436 | not reported | — | No | Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to... | 2026-10-26 |
| CVE-2026-112880 | not reported | — | No | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in hackney_http_connect in benoi... | 2026-10-26 |
| CVE-2026-111103 | not reported | — | No | Improper Cleanup on Thrown Exception vulnerability in the HTTP/2 handler of mtrudel bandit allows an unauthenticated remote attacker to bypa... | 2026-10-26 |
| CVE-2026-111101 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body reader of mtrudel bandit allows an unauthent... | 2026-10-26 |
| CVE-2026-110499 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated... | 2026-10-26 |
| CVE-2026-109584 | not reported | — | No | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unau... | 2026-10-26 |
| CVE-2026-108529 | not reported | — | No | Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to... | 2026-10-26 |
| CVE-2026-108525 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated... | 2026-10-26 |
| CVE-2026-59106 | critical | 9.8 | No | A security vulnerability has been identified in the WolfProt interface implementation. Insufficient neutralization of user-controlled input... | 2026-10-26 |
| CVE-2026-114820 | critical | 9.1 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).... | 2026-10-26 |
| CVE-2026-94386 | medium | 4.8 | No | Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component. This issue affects Apache Camel: from 4.19.0 b... | 2026-10-26 |
| CVE-2026-90885 | high | 7.5 | No | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component. This issue affects Apache Camel: from... | 2026-10-26 |
| CVE-2026-116516 | medium | 6.5 | No | Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attac... | 2026-10-26 |
| CVE-2026-59116 | medium | 6.8 | No | Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over... | 2026-10-26 |