Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-9588 | critical | 9.8 | No | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services... | 2026-10-18 |
| CVE-2025-34206 | critical | 9.8 | No | Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) mount host configuration and secret ma... | 2026-10-18 |
| CVE-2025-34205 | critical | 9.8 | No | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deplo... | 2026-10-18 |
| CVE-2025-34204 | critical | 9.8 | No | Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers th... | 2026-10-18 |
| CVE-2025-34203 | critical | 9.8 | No | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1002 and Application versions prior to 20.0.2614 (VA and... | 2026-10-18 |
| CVE-2025-34198 | critical | 9.8 | No | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951 and Application prior to 20.0.2368 (VA and SaaS deplo... | 2026-10-18 |
| CVE-2025-34195 | critical | 9.8 | No | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 (Windows client dep... | 2026-10-18 |
| CVE-2025-34193 | critical | 9.8 | No | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 include W... | 2026-10-18 |
| CVE-2025-34192 | critical | 9.8 | No | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 (macOS/Li... | 2026-10-18 |
| CVE-2025-36222 | critical | 9.8 | No | IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure defa... | 2026-10-18 |
| CVE-2025-55728 | critical | 9.8 | No | XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prio... | 2026-10-18 |
| CVE-2025-55727 | critical | 9.8 | No | XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prio... | 2026-10-18 |
| CVE-2025-54261 | critical | 10.0 | No | ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Pa... | 2026-10-18 |
| CVE-2025-54914 | critical | 9.8 | No | Azure Networking Elevation of Privilege Vulnerability | 2026-10-18 |
| CVE-2025-9788 | critical | 9.8 | No | A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown fu... | 2026-10-18 |
| CVE-2025-9759 | critical | 9.8 | No | A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup... | 2026-10-18 |
| CVE-2025-9757 | critical | 9.8 | No | A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.p... | 2026-10-18 |
| CVE-2025-9750 | critical | 9.8 | No | A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file... | 2026-10-18 |
| CVE-2025-9749 | critical | 9.8 | No | A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects a... | 2026-10-18 |
| CVE-2025-9748 | critical | 9.8 | No | A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of... | 2026-10-18 |