Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-107354 | not reported | — | No | Rejected reason: ** This candidate has been removed by an organization. | 2026-10-19 |
| CVE-2026-62998 | medium | 4.3 | No | REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.php accepts the sort... | 2026-10-19 |
| CVE-2026-67405 | high | 8.1 | No | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Neither the Web-MQTT handler (dep... | 2026-10-19 |
| CVE-2026-67233 | high | 7.1 | No | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The shovel management resource's... | 2026-10-19 |
| CVE-2026-110917 | medium | 4.3 | No | Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium... | 2026-10-19 |
| CVE-2026-110918 | medium | 4.3 | No | Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromiu... | 2026-10-19 |
| CVE-2026-110919 | high | 8.8 | No | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-19 |
| CVE-2026-110920 | high | 8.8 | No | Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-10-19 |
| CVE-2026-110921 | high | 8.8 | No | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-19 |
| CVE-2026-110922 | high | 8.8 | No | Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox v... | 2026-10-19 |
| CVE-2026-70012 | high | 7.5 | No | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-83934 | high | 8.8 | No | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-83935 | critical | 9.8 | No | Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-93483 | not reported | — | No | In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions... | 2026-10-19 |
| CVE-2026-95125 | medium | 6.5 | No | libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated... | 2026-10-19 |
| CVE-2026-75353 | high | 7.5 | No | OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a... | 2026-10-19 |
| CVE-2026-78796 | critical | 9.8 | No | An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to... | 2026-10-19 |
| CVE-2026-50218 | high | 8.5 | No | Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a... | 2026-10-19 |
| CVE-2026-42616 | high | 7.8 | No | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfsca... | 2026-10-19 |
| CVE-2026-23112 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_bu... | 2026-10-19 |