Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87853 | high | 7.5 | No | A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strn... | 2026-10-29 |
| CVE-2026-5260 | high | 8.2 | No | A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server usin... | 2026-10-29 |
| CVE-2026-42013 | high | 8.2 | No | A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to... | 2026-10-29 |
| CVE-2026-42012 | high | 7.1 | No | A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains U... | 2026-10-29 |
| CVE-2026-42011 | high | 7.4 | No | A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate... | 2026-10-29 |
| CVE-2026-114488 | high | 7.4 | No | A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts I... | 2026-10-29 |
| CVE-2026-102010 | high | 7.0 | No | A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocat... | 2026-10-29 |
| CVE-2026-94346 | high | 7.2 | No | PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,... | 2026-10-29 |
| CVE-2026-92709 | high | 8.1 | No | Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allow... | 2026-10-29 |
| CVE-2026-86385 | high | 8.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability.... | 2026-10-29 |
| CVE-2026-86380 | high | 7.2 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-86018 | not reported | — | No | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users... | 2026-10-29 |
| CVE-2026-74580 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq->met... | 2026-10-29 |
| CVE-2026-57210 | not reported | — | No | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trusted_proxies opti... | 2026-10-29 |
| CVE-2026-57144 | high | 8.8 | No | PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sandbox.SandlockSandbox is documented and... | 2026-10-29 |
| CVE-2026-57116 | critical | 9.8 | No | PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains... | 2026-10-29 |
| CVE-2026-56840 | high | 8.8 | No | PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.HTTPApproval renders pending tool appro... | 2026-10-29 |
| CVE-2026-48360 | critical | 9.6 | No | Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code... | 2026-10-29 |
| CVE-2026-55422 | medium | 4.6 | No | conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components rende... | 2026-10-29 |
| CVE-2026-56835 | high | 8.3 | No | PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_... | 2026-10-29 |