Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106153 | medium | 5.4 | No | In Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and MultiViewCalendar month content templates render data.url a... | 2026-10-20 |
| CVE-2026-108116 | high | 7.5 | No | In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predi... | 2026-10-20 |
| CVE-2026-55453 | low | 3.3 | No | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quot... | 2026-10-20 |
| CVE-2026-55467 | low | 2.5 | No | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the cupsdCreateJob opt... | 2026-10-20 |
| CVE-2026-55480 | medium | 5.7 | No | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_model() in schedu... | 2026-10-20 |
| CVE-2026-57488 | high | 7.1 | No | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httppa... | 2026-10-20 |
| CVE-2026-77630 | high | 7.5 | No | pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/ur... | 2026-10-20 |
| CVE-2026-103119 | critical | 9.1 | No | Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between... | 2026-10-20 |
| CVE-2026-101356 | critical | 9.1 | No | Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger reques... | 2026-10-20 |
| CVE-2026-113810 | high | 7.0 | No | A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS w... | 2026-10-20 |
| CVE-2026-113808 | high | 7.1 | No | A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS w... | 2026-10-20 |
| CVE-2026-113469 | high | 7.5 | No | A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine res... | 2026-10-20 |
| CVE-2026-113465 | medium | 6.6 | No | It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerabi... | 2026-10-20 |
| CVE-2026-111090 | high | 7.8 | No | A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessa... | 2026-10-20 |
| CVE-2026-90800 | not reported | — | No | Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a... | 2026-10-20 |
| CVE-2026-90799 | not reported | — | No | Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of... | 2026-10-20 |
| CVE-2026-90798 | not reported | — | No | A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or t... | 2026-10-20 |
| CVE-2026-90797 | not reported | — | No | An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote client to cause a den... | 2026-10-20 |
| CVE-2026-107755 | not reported | — | No | Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated... | 2026-10-20 |
| CVE-2026-108089 | high | 7.5 | No | ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. A... | 2026-10-20 |