Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-97702 | medium | 5.3 | No | Open edX Platform enables the authoring and delivery of online learning at any scale. From the Ulmo release until release/ulmo.4 and release... | 2026-11-04 |
| CVE-2026-86041 | not reported | — | No | ezBookkeeping is an open source, self-hosted personal finance application. From 0.10.0 until 1.6.0, ezBookkeeping constructs its Gin router... | 2026-11-04 |
| CVE-2026-77372 | not reported | — | No | VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.30, the Unix, macOS, and FreeBSD serialization pat... | 2026-11-04 |
| CVE-2026-76892 | not reported | — | No | tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-... | 2026-11-04 |
| CVE-2026-76826 | not reported | — | No | tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflo... | 2026-11-04 |
| CVE-2026-6384 | high | 7.8 | No | A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attack... | 2026-11-04 |
| CVE-2026-63622 | high | 7.8 | No | A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-followin... | 2026-11-04 |
| CVE-2026-6266 | high | 8.3 | No | A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (... | 2026-11-04 |
| CVE-2026-66758 | high | 7.8 | No | A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using sig... | 2026-11-04 |
| CVE-2026-62662 | high | 7.7 | No | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 1.11.0 until 2.10.0, createTokenFromCl... | 2026-11-04 |
| CVE-2026-62365 | medium | 5.3 | No | Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. DecodeWinevt in src/a... | 2026-11-04 |
| CVE-2026-61805 | not reported | — | No | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.54.0, quiz submiss... | 2026-11-04 |
| CVE-2026-61626 | not reported | — | No | libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. From 0.17.4 until 0.17.... | 2026-11-04 |
| CVE-2026-62439 | high | 7.0 | No | A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By t... | 2026-11-04 |
| CVE-2026-5680 | high | 7.5 | No | A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permes... | 2026-11-04 |
| CVE-2026-5674 | high | 8.8 | No | A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak,... | 2026-11-04 |
| CVE-2026-59851 | high | 8.8 | No | A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerbe... | 2026-11-04 |
| CVE-2026-59692 | high | 7.5 | No | A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguis... | 2026-11-04 |
| CVE-2026-5201 | high | 7.5 | No | A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper va... | 2026-11-04 |
| CVE-2026-59091 | high | 7.8 | No | A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities... | 2026-11-04 |