Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102225 | high | 8.8 | No | Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | 2026-10-26 |
| CVE-2026-106628 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-10-26 |
| CVE-2026-102227 | high | 7.8 | No | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. | 2026-10-26 |
| CVE-2026-106629 | critical | 9.3 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject mali... | 2026-10-26 |
| CVE-2026-106630 | critical | 9.3 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject mali... | 2026-10-26 |
| CVE-2026-95721 | low | 3.3 | No | A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticate... | 2026-10-26 |
| CVE-2026-95720 | medium | 4.4 | No | A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of ser... | 2026-10-26 |
| CVE-2026-95719 | medium | 4.9 | No | An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with admi... | 2026-10-26 |
| CVE-2026-95718 | medium | 5.3 | No | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing a... | 2026-10-26 |
| CVE-2026-95717 | medium | 5.5 | No | A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remo... | 2026-10-26 |
| CVE-2026-95716 | medium | 6.5 | No | An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication co... | 2026-10-26 |
| CVE-2026-95715 | medium | 6.8 | No | An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an at... | 2026-10-26 |
| CVE-2026-95714 | medium | 6.8 | No | A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achi... | 2026-10-26 |
| CVE-2026-95713 | high | 7.0 | No | An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unaut... | 2026-10-26 |
| CVE-2026-95712 | high | 7.1 | No | A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access li... | 2026-10-26 |
| CVE-2026-95711 | high | 7.1 | No | An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to c... | 2026-10-26 |
| CVE-2026-95710 | high | 7.1 | No | An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthentic... | 2026-10-26 |
| CVE-2026-95709 | high | 7.2 | No | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high priv... | 2026-10-26 |
| CVE-2026-95708 | high | 7.2 | No | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high priv... | 2026-10-26 |
| CVE-2026-95707 | high | 7.2 | No | A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve r... | 2026-10-26 |