Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85301 | medium | 4.8 | No | Improper Authentication vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from... | 2026-10-19 |
| CVE-2026-85300 | medium | 5.5 | No | Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from... | 2026-10-19 |
| CVE-2026-85248 | medium | 5.9 | No | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Camel PQC component. Th... | 2026-10-19 |
| CVE-2026-84178 | medium | 6.1 | No | Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5... | 2026-10-19 |
| CVE-2026-80312 | high | 8.2 | No | Improper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.1... | 2026-10-19 |
| CVE-2026-78164 | high | 8.2 | No | Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnera... | 2026-10-19 |
| CVE-2026-78163 | medium | 5.9 | No | Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive... | 2026-10-19 |
| CVE-2026-90910 | critical | 9.8 | No | Missing authentication for critical function vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The reaction... | 2026-10-19 |
| CVE-2026-109829 | critical | 9.1 | No | undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes t... | 2026-10-19 |
| CVE-2026-109841 | high | 7.5 | No | undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifie... | 2026-10-19 |
| CVE-2026-109869 | high | 7.5 | No | undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch(... | 2026-10-19 |
| CVE-2026-109924 | high | 7.5 | No | undici is an HTTP client library for Node.js. In versions 6.5.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its EventSou... | 2026-10-19 |
| CVE-2026-109932 | high | 7.5 | No | undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its WebSock... | 2026-10-19 |
| CVE-2026-111214 | high | 7.2 | No | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privile... | 2026-10-19 |
| CVE-2026-111215 | high | 7.2 | No | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root... | 2026-10-19 |
| CVE-2026-112251 | medium | 4.3 | No | A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file apps/clawhostgo/src/ma... | 2026-10-19 |
| CVE-2026-112248 | medium | 4.7 | No | A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PreparePro... | 2026-10-19 |
| CVE-2026-112195 | medium | 4.7 | No | A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/... | 2026-10-19 |
| CVE-2026-112158 | medium | 6.5 | No | A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. E... | 2026-10-19 |
| CVE-2026-112153 | high | 7.3 | No | A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function... | 2026-10-19 |