Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-57864 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-57861 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-53990 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-60101 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-60100 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-60099 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-60098 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-60097 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-60096 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-97387 | not reported | — | No | Rejected reason: This CVE is a duplicate of another CVE. | 2026-10-16 |
| CVE-2026-10150 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-10149 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-10145 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-94200 | not reported | — | No | Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_stor... | 2026-10-16 |
| CVE-2026-79957 | high | 8.1 | No | ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled nu... | 2026-10-16 |
| CVE-2026-111688 | medium | 4.3 | No | Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to evade role data-scope restricti... | 2026-10-16 |
| CVE-2026-110816 | medium | 5.3 | No | ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element c... | 2026-10-16 |
| CVE-2026-108337 | not reported | — | No | An administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in t... | 2026-10-16 |
| CVE-2026-107349 | high | 7.5 | No | An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage... | 2026-10-16 |
| CVE-2026-107348 | medium | 5.9 | No | Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a... | 2026-10-16 |