Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112152 | high | 7.3 | No | A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by... | 2026-10-19 |
| CVE-2026-112151 | high | 7.3 | No | A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulner... | 2026-10-19 |
| CVE-2026-112149 | high | 7.3 | No | A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the functi... | 2026-10-19 |
| CVE-2026-112147 | medium | 5.3 | No | A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src... | 2026-10-19 |
| CVE-2026-111223 | high | 7.2 | No | Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile pr... | 2026-10-19 |
| CVE-2026-111225 | high | 8.8 | No | Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated... | 2026-10-19 |
| CVE-2026-111228 | medium | 5.5 | No | Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticat... | 2026-10-19 |
| CVE-2026-108443 | high | 8.8 | No | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-111230 | medium | 4.9 | No | Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read fi... | 2026-10-19 |
| CVE-2026-108444 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-108445 | high | 8.8 | No | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-111233 | medium | 6.1 | No | Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote atta... | 2026-10-19 |
| CVE-2026-108446 | high | 8.8 | No | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-87018 | high | 7.5 | No | undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client p... | 2026-10-19 |
| CVE-2026-87029 | high | 7.5 | No | undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forward... | 2026-10-19 |
| CVE-2026-108447 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-108448 | high | 7.5 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-67404 | high | 7.4 | No | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, s... | 2026-10-19 |
| CVE-2026-67235 | medium | 6.5 | No | RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize (a ui... | 2026-10-19 |
| CVE-2026-67232 | high | 7.5 | No | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The cowboy WebSocket options at l... | 2026-10-19 |