Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-43844 | not reported | — | No | A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism. | 2026-10-20 |
| CVE-2026-43843 | not reported | — | No | An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. | 2026-10-20 |
| CVE-2026-43842 | not reported | — | No | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the... | 2026-10-20 |
| CVE-2026-43841 | not reported | — | No | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the... | 2026-10-20 |
| CVE-2026-43839 | not reported | — | No | A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service. | 2026-10-20 |
| CVE-2026-43838 | not reported | — | No | A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution. | 2026-10-20 |
| CVE-2026-43837 | not reported | — | No | A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code... | 2026-10-20 |
| CVE-2026-43836 | not reported | — | No | A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges. | 2026-10-20 |
| CVE-2026-43835 | not reported | — | No | A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potent... | 2026-10-20 |
| CVE-2026-43834 | not reported | — | No | A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executi... | 2026-10-20 |
| CVE-2026-102467 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not defin... | 2026-10-20 |
| CVE-2026-102475 | medium | 5.9 | No | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that re... | 2026-10-20 |
| CVE-2026-102461 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an... | 2026-10-20 |
| CVE-2026-96903 | medium | 4.3 | No | The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on several of its contact-management read AJ... | 2026-10-20 |
| CVE-2026-96902 | medium | 5.3 | No | The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allo... | 2026-10-20 |
| CVE-2026-102462 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL... | 2026-10-20 |
| CVE-2026-102463 | medium | 5.9 | No | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client... | 2026-10-20 |
| CVE-2026-14933 | not reported | — | No | Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.39.2, on on-premises... | 2026-10-20 |
| CVE-2026-9589 | not reported | — | No | Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfi... | 2026-10-20 |
| CVE-2026-113468 | not reported | — | No | The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visit... | 2026-10-20 |