Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-94450 | high | 7.5 | No | Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause... | 2026-10-20 |
| CVE-2026-86831 | high | 8.7 | No | Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an... | 2026-10-20 |
| CVE-2026-86830 | high | 7.2 | No | Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 migh... | 2026-10-20 |
| CVE-2026-85267 | not reported | — | No | A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacke... | 2026-10-20 |
| CVE-2026-75997 | not reported | — | No | Rejected reason: this CVE was issued in error. | 2026-10-20 |
| CVE-2026-75751 | not reported | — | No | Rejected reason: this CVE was issued in error. | 2026-10-20 |
| CVE-2026-75747 | not reported | — | No | Rejected reason: this CVE was issued in error. | 2026-10-20 |
| CVE-2026-78497 | high | 8.4 | No | JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pat... | 2026-10-20 |
| CVE-2026-71563 | medium | 4.3 | No | Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP an... | 2026-10-20 |
| CVE-2026-68498 | high | 7.5 | No | StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Object property name can... | 2026-10-20 |
| CVE-2026-69080 | high | 7.5 | No | Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4.... | 2026-10-20 |
| CVE-2026-69077 | high | 7.5 | No | Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly e... | 2026-10-20 |
| CVE-2026-69076 | high | 7.5 | No | Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed... | 2026-10-20 |
| CVE-2026-64943 | high | 8.1 | No | Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API... | 2026-10-20 |
| CVE-2026-48279 | not reported | — | No | Rejected reason: this CVE was issued in error. | 2026-10-20 |
| CVE-2026-35561 | critical | 9.8 | No | Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 mig... | 2026-10-20 |
| CVE-2026-21356 | not reported | — | No | Rejected reason: this CVE was issued in error. | 2026-10-20 |
| CVE-2026-21270 | not reported | — | No | Rejected reason: this CVE was issued in error. | 2026-10-20 |
| CVE-2026-21266 | not reported | — | No | Rejected reason: this CVE was issued in error. | 2026-10-20 |
| CVE-2026-113677 | medium | 5.4 | No | Froxlor from 0.10.0 before 2.3.15 contains a missing authorization vulnerability in the SubDomains.delete API command that allows authentica... | 2026-10-20 |