Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-89073 | critical | 9.8 | No | Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 202... | 2026-10-19 |
| CVE-2026-89074 | high | 8.8 | No | Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and fr... | 2026-10-19 |
| CVE-2026-89075 | high | 7.3 | No | Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 an... | 2026-10-19 |
| CVE-2026-89076 | high | 8.8 | No | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Repor... | 2026-10-19 |
| CVE-2026-89077 | high | 8.8 | No | Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Tra... | 2026-10-19 |
| CVE-2026-68571 | high | 8.8 | No | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code inje... | 2026-10-19 |
| CVE-2026-98868 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment cache_replay(), the... | 2026-10-19 |
| CVE-2026-98867 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from persistent memory cache_k... | 2026-10-19 |
| CVE-2026-98866 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Add a s... | 2026-10-19 |
| CVE-2026-98865 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't run ops.dequeue() with a DSQ lock held ops.dequeue()... | 2026-10-19 |
| CVE-2026-98864 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task eb... | 2026-10-19 |
| CVE-2026-98863 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails R... | 2026-10-19 |
| CVE-2026-98861 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() unreg... | 2026-10-19 |
| CVE-2026-98860 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request As rep... | 2026-10-19 |
| CVE-2026-98858 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix task_work add use-after-free with SQPOLL For SQPOLL, the... | 2026-10-19 |
| CVE-2026-98849 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: pfcp: fix socket lifetime on netdevice registration failure pfcp_newli... | 2026-10-19 |
| CVE-2026-98845 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: tpm: Disable TPM on null key name mismatch The null key name check exi... | 2026-10-19 |
| CVE-2026-98844 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix ne... | 2026-10-19 |
| CVE-2026-98843 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data n... | 2026-10-19 |
| CVE-2026-98842 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetag_load_module() If codetag_load... | 2026-10-19 |