Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92200 | high | 7.8 | No | Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attac... | 2026-11-04 |
| CVE-2026-92199 | high | 7.8 | No | Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability. This vulnerability allows loca... | 2026-11-04 |
| CVE-2026-92198 | high | 8.2 | No | Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote... | 2026-11-04 |
| CVE-2026-92197 | high | 8.8 | No | Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers t... | 2026-11-04 |
| CVE-2026-92196 | high | 7.2 | No | Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability all... | 2026-11-04 |
| CVE-2026-92195 | high | 8.8 | No | Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote att... | 2026-11-04 |
| CVE-2026-92194 | high | 8.8 | No | Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remo... | 2026-11-04 |
| CVE-2026-92193 | medium | 6.5 | No | Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability. This vulnerability allows remot... | 2026-11-04 |
| CVE-2026-92192 | high | 8.8 | No | Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attack... | 2026-11-04 |
| CVE-2026-92191 | high | 8.8 | No | Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows remote attacke... | 2026-11-04 |
| CVE-2026-92190 | critical | 9.8 | No | Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabilit... | 2026-11-04 |
| CVE-2026-92189 | critical | 9.8 | No | Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerabilit... | 2026-11-04 |
| CVE-2026-92188 | critical | 9.8 | No | Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows r... | 2026-11-04 |
| CVE-2026-92187 | high | 8.8 | No | Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allo... | 2026-11-04 |
| CVE-2026-92186 | high | 8.8 | No | Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows... | 2026-11-04 |
| CVE-2026-92185 | high | 7.2 | No | Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows r... | 2026-11-04 |
| CVE-2026-97693 | critical | 9.9 | No | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there i... | 2026-11-04 |
| CVE-2026-76893 | not reported | — | No | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.2, the HTTP mode of @tsparticles/mcp-... | 2026-11-04 |
| CVE-2026-63655 | high | 7.5 | No | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-... | 2026-11-04 |
| CVE-2026-58128 | medium | 6.2 | No | Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious appl... | 2026-11-04 |