Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116844 | medium | 4.8 | No | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag... | 2026-10-29 |
| CVE-2026-115785 | medium | 4.3 | No | An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) allows an ordinary auth... | 2026-10-29 |
| CVE-2026-114732 | medium | 6.8 | No | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-host installations.... | 2026-10-29 |
| CVE-2026-113775 | high | 7.8 | No | A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk F... | 2026-10-29 |
| CVE-2026-111422 | high | 8.8 | No | In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` parameter only once, alt... | 2026-10-29 |
| CVE-2026-107672 | high | 8.8 | No | A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Exte... | 2026-10-29 |
| CVE-2026-104349 | high | 7.3 | No | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the... | 2026-10-29 |
| CVE-2026-105192 | critical | 9.8 | No | LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share K... | 2026-10-29 |
| CVE-2026-103792 | critical | 9.6 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-29 |
| CVE-2026-103780 | critical | 9.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-102815 | not reported | — | No | An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileg... | 2026-10-29 |
| CVE-2026-103593 | not reported | — | No | A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or int... | 2026-10-29 |
| CVE-2026-102814 | not reported | — | No | An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key,... | 2026-10-29 |
| CVE-2026-101854 | high | 8.8 | No | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-10-29 |
| CVE-2026-101853 | high | 8.8 | No | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-10-29 |
| CVE-2026-101852 | high | 8.8 | No | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-10-29 |
| CVE-2026-101842 | high | 8.8 | No | Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO). Supported versions... | 2026-10-29 |
| CVE-2026-101841 | high | 8.2 | No | Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported versions that are affecte... | 2026-10-29 |
| CVE-2026-101834 | high | 8.1 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are... | 2026-10-29 |
| CVE-2025-30414 | high | 7.1 | No | Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows)... | 2026-10-29 |