Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113914 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadO... | 2026-10-29 |
| CVE-2026-113908 | medium | 5.5 | No | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sens... | 2026-10-29 |
| CVE-2026-112706 | medium | 5.5 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.... | 2026-10-29 |
| CVE-2026-112701 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadO... | 2026-10-29 |
| CVE-2026-112685 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2... | 2026-10-29 |
| CVE-2026-112678 | medium | 5.5 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.... | 2026-10-29 |
| CVE-2026-112675 | medium | 5.5 | No | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Taho... | 2026-10-29 |
| CVE-2026-112658 | medium | 5.5 | No | This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. An app may... | 2026-10-29 |
| CVE-2026-112618 | medium | 5.5 | No | An access issue was addressed with improved access restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, visionOS 27.2. An app may... | 2026-10-29 |
| CVE-2026-112617 | medium | 5.5 | No | An information disclosure issue was addressed with improved logic. This issue is fixed in macOS Golden Gate 27.2. An app may be able to acce... | 2026-10-29 |
| CVE-2026-112609 | medium | 5.5 | No | This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user... | 2026-10-29 |
| CVE-2026-112559 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadO... | 2026-10-29 |
| CVE-2026-112547 | medium | 5.5 | No | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sen... | 2026-10-29 |
| CVE-2026-112533 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, ma... | 2026-10-29 |
| CVE-2026-111850 | high | 8.5 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allow... | 2026-10-29 |
| CVE-2026-112506 | medium | 5.5 | No | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2. An app may be able to access sens... | 2026-10-29 |
| CVE-2026-112455 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadO... | 2026-10-29 |
| CVE-2026-104109 | medium | 6.8 | No | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise validates... | 2026-10-29 |
| CVE-2026-107445 | medium | 5.4 | No | A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remot... | 2026-10-29 |
| CVE-2024-42360 | critical | 9.8 | No | SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user interface for personal or group use. Several HTTP endpoints di... | 2026-10-29 |