Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-76739 | medium | 4.3 | No | A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploi... | 2026-10-19 |
| CVE-2026-103091 | not reported | — | No | Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrou... | 2026-10-19 |
| CVE-2026-102503 | not reported | — | No | Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressS... | 2026-10-19 |
| CVE-2026-108983 | critical | 9.8 | No | A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . | 2026-10-19 |
| CVE-2026-112062 | medium | 5.9 | No | lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stac... | 2026-10-19 |
| CVE-2026-112046 | medium | 5.5 | No | OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating... | 2026-10-19 |
| CVE-2026-111997 | not reported | — | No | ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters... | 2026-10-19 |
| CVE-2025-51619 | medium | 5.5 | No | A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru 1.4.0 allows local unprivileged users to cause a denial-of-service... | 2026-10-19 |
| CVE-2025-39682 | critical | 9.8 | Listed | In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg()... | 2026-10-19 |
| CVE-2025-39964 | medium | 5.5 | Listed | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing... | 2026-10-19 |
| CVE-2026-101308 | medium | 5.5 | No | When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the chann... | 2026-10-19 |
| CVE-2026-58098 | high | 8.4 | No | When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number... | 2026-10-19 |
| CVE-2026-106010 | medium | 5.3 | No | The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status update route an... | 2026-10-19 |
| CVE-2026-103311 | medium | 5.3 | No | The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of incoming payment we... | 2026-10-19 |
| CVE-2026-91046 | medium | 4.3 | No | The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several o... | 2026-10-19 |
| CVE-2026-89286 | medium | 5.3 | No | The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly acces... | 2026-10-19 |
| CVE-2026-106933 | medium | 6.8 | No | The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPres... | 2026-10-19 |
| CVE-2026-106028 | medium | 5.3 | No | The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons,... | 2026-10-19 |
| CVE-2026-106014 | medium | 5.3 | No | The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hos... | 2026-10-19 |
| CVE-2026-96534 | high | 7.7 | No | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise a... | 2026-10-19 |