Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87951 | low | 3.8 | No | Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This... | 2026-10-22 |
| CVE-2026-87950 | medium | 5.3 | No | Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affect... | 2026-10-22 |
| CVE-2026-87949 | low | 3.3 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider all... | 2026-10-22 |
| CVE-2026-87948 | low | 3.5 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider all... | 2026-10-22 |
| CVE-2026-92892 | critical | 9.0 | No | Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0... | 2026-10-22 |
| CVE-2026-97237 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows... | 2026-10-22 |
| CVE-2026-87947 | medium | 4.8 | No | Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature Spoof. This issue affe... | 2026-10-22 |
| CVE-2026-87946 | medium | 4.8 | No | Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service... | 2026-10-22 |
| CVE-2026-87945 | medium | 5.4 | No | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This... | 2026-10-22 |
| CVE-2026-87944 | medium | 4.8 | No | Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM). This issue affect... | 2026-10-22 |
| CVE-2026-87943 | medium | 6.5 | No | Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects SAML SSO - Service Pr... | 2026-10-22 |
| CVE-2026-76066 | high | 7.5 | No | IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls aga... | 2026-10-22 |
| CVE-2026-67597 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-22 |
| CVE-2026-93856 | medium | 4.3 | No | In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-sc... | 2026-10-22 |
| CVE-2026-114117 | medium | 5.9 | No | Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | K), where K is any nonzero int... | 2026-10-22 |
| CVE-2026-76531 | critical | 9.9 | No | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revie... | 2026-10-22 |
| CVE-2026-76530 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revie... | 2026-10-22 |
| CVE-2026-76302 | critical | 9.9 | No | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revie... | 2026-10-22 |
| CVE-2026-76299 | critical | 9.9 | No | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revie... | 2026-10-22 |
| CVE-2026-96398 | medium | 4.3 | No | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12,... | 2026-10-22 |