Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-76492 | high | 7.5 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c... | 2026-10-22 |
| CVE-2026-76491 | high | 7.5 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c... | 2026-10-22 |
| CVE-2026-76490 | high | 8.6 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c... | 2026-10-22 |
| CVE-2026-76489 | medium | 5.8 | No | Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticat... | 2026-10-22 |
| CVE-2026-76487 | medium | 5.3 | No | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Un... | 2026-10-22 |
| CVE-2026-76475 | critical | 9.3 | No | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim... | 2026-10-22 |
| CVE-2026-76445 | medium | 5.3 | No | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker... | 2026-10-22 |
| CVE-2026-76435 | medium | 5.3 | No | A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected... | 2026-10-22 |
| CVE-2026-20356 | high | 7.5 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering te... | 2026-10-22 |
| CVE-2026-20221 | medium | 5.8 | No | Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort... | 2026-10-22 |
| CVE-2026-20197 | medium | 5.8 | No | Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote a... | 2026-10-22 |
| CVE-2026-20179 | medium | 5.8 | No | Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow... | 2026-10-22 |
| CVE-2026-20019 | medium | 5.8 | No | Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote... | 2026-10-22 |
| CVE-2026-20011 | medium | 5.8 | No | Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacke... | 2026-10-22 |
| CVE-2024-48884 | critical | 9.1 | No | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1,... | 2026-10-22 |
| CVE-2024-26011 | critical | 9.8 | No | A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4,... | 2026-10-22 |
| CVE-2026-106491 | medium | 6.4 | No | Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by i... | 2026-10-22 |
| CVE-2026-106492 | medium | 6.5 | No | Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affect... | 2026-10-22 |
| CVE-2026-106493 | medium | 4.1 | No | Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validat... | 2026-10-22 |
| CVE-2026-70108 | high | 7.8 | No | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-22 |