Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111232 | medium | 4.8 | No | Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: R... | 2026-10-21 |
| CVE-2026-111227 | medium | 5.5 | No | Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with t... | 2026-10-21 |
| CVE-2026-111222 | high | 7.2 | No | Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to... | 2026-10-21 |
| CVE-2026-111217 | high | 7.2 | No | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privile... | 2026-10-21 |
| CVE-2026-104828 | high | 7.2 | No | HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML. Prior to 5.4.0, HTMLWriterFilter writes decoded TEXTAREA and TITLE character content wi... | 2026-10-21 |
| CVE-2026-104266 | medium | 6.5 | No | tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file containing a sub-atom with a size of zero i... | 2026-10-21 |
| CVE-2026-85409 | medium | 6.3 | No | A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNo... | 2026-10-20 |
| CVE-2026-85408 | medium | 4.3 | No | A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversa... | 2026-10-20 |
| CVE-2026-6945 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-20 |
| CVE-2026-69943 | high | 8.8 | No | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker... | 2026-10-20 |
| CVE-2026-101146 | medium | 4.3 | No | A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of t... | 2026-10-20 |
| CVE-2026-101145 | medium | 4.3 | No | A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAdd... | 2026-10-20 |
| CVE-2026-101144 | medium | 6.3 | No | A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of... | 2026-10-20 |
| CVE-2026-101143 | medium | 4.3 | No | A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some unknown functionality of the file /qm/cz.zoom.s... | 2026-10-20 |
| CVE-2026-101142 | medium | 6.3 | No | A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Sc... | 2026-10-20 |
| CVE-2026-101141 | low | 3.5 | No | A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the compone... | 2026-10-20 |
| CVE-2026-85407 | medium | 4.3 | No | A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/co... | 2026-10-20 |
| CVE-2026-85406 | low | 3.5 | No | A vulnerability has been found in Eleveo Quality Management 9.7.0. This vulnerability affects unknown code of the component Conversation Rev... | 2026-10-20 |
| CVE-2026-85405 | low | 3.5 | No | A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing... | 2026-10-20 |
| CVE-2026-102182 | critical | 9.8 | No | A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network... | 2026-10-20 |