Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103620 | medium | 6.5 | No | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to... | 2026-10-20 |
| CVE-2026-75996 | high | 7.5 | No | ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker c... | 2026-10-20 |
| CVE-2026-102471 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR... | 2026-10-20 |
| CVE-2026-103778 | medium | 5.5 | No | Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated a... | 2026-10-20 |
| CVE-2026-102465 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-all... | 2026-10-20 |
| CVE-2026-18205 | medium | 6.1 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics Technologies Inc.... | 2026-10-20 |
| CVE-2026-43858 | not reported | — | No | A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. | 2026-10-20 |
| CVE-2026-43857 | not reported | — | No | A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. | 2026-10-20 |
| CVE-2026-43856 | not reported | — | No | A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arb... | 2026-10-20 |
| CVE-2026-43855 | not reported | — | No | A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. | 2026-10-20 |
| CVE-2026-43854 | not reported | — | No | A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled... | 2026-10-20 |
| CVE-2026-43853 | not reported | — | No | A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash. | 2026-10-20 |
| CVE-2026-43852 | not reported | — | No | A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system. | 2026-10-20 |
| CVE-2026-43851 | not reported | — | No | A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system. | 2026-10-20 |
| CVE-2026-43850 | not reported | — | No | A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. | 2026-10-20 |
| CVE-2026-43849 | not reported | — | No | A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. | 2026-10-20 |
| CVE-2026-43848 | not reported | — | No | A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. | 2026-10-20 |
| CVE-2026-43847 | not reported | — | No | A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even whe... | 2026-10-20 |
| CVE-2026-43846 | not reported | — | No | A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution. | 2026-10-20 |
| CVE-2026-43845 | not reported | — | No | A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism. | 2026-10-20 |