Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-71385 | high | 8.4 | No | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curre... | 2026-10-20 |
| CVE-2026-75748 | high | 7.6 | No | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with hig... | 2026-10-20 |
| CVE-2026-75994 | critical | 9.6 | No | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curre... | 2026-10-20 |
| CVE-2026-84884 | high | 8.8 | No | IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticat... | 2026-10-20 |
| CVE-2026-84882 | medium | 6.5 | No | IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticate... | 2026-10-20 |
| CVE-2026-84862 | high | 7.2 | No | IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could ex... | 2026-10-20 |
| CVE-2026-85542 | high | 8.8 | No | IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated... | 2026-10-20 |
| CVE-2026-75995 | high | 8.4 | No | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the cur... | 2026-10-20 |
| CVE-2026-84893 | medium | 6.5 | No | IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerabi... | 2026-10-20 |
| CVE-2026-85029 | high | 8.8 | No | IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrar... | 2026-10-20 |
| CVE-2026-100653 | medium | 6.5 | No | vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-supplied model revis... | 2026-10-20 |
| CVE-2026-102201 | high | 7.8 | No | Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-102202 | high | 7.8 | No | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges lo... | 2026-10-20 |
| CVE-2026-102203 | high | 8.8 | No | Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network. | 2026-10-20 |
| CVE-2026-102205 | high | 7.8 | No | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges lo... | 2026-10-20 |
| CVE-2026-102206 | medium | 6.8 | No | Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attac... | 2026-10-20 |
| CVE-2026-102207 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker... | 2026-10-20 |
| CVE-2026-102208 | high | 7.0 | No | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-100070 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashi... | 2026-10-20 |
| CVE-2026-76001 | high | 7.1 | No | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged att... | 2026-10-20 |