Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-8822 | high | 7.5 | No | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS... | 2026-10-30 |
| CVE-2026-90864 | critical | 9.1 | No | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated... | 2026-10-30 |
| CVE-2026-90863 | critical | 9.1 | No | Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows... | 2026-10-30 |
| CVE-2026-90862 | medium | 4.3 | No | Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou... | 2026-10-30 |
| CVE-2026-90861 | medium | 6.6 | No | Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another adm... | 2026-10-30 |
| CVE-2026-89052 | not reported | — | No | A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across dev... | 2026-10-30 |
| CVE-2026-86400 | critical | 9.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-30 |
| CVE-2026-86399 | high | 7.2 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-30 |
| CVE-2026-86398 | high | 8.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-30 |
| CVE-2026-87096 | low | 3.3 | No | Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber I... | 2026-10-30 |
| CVE-2026-86394 | high | 7.2 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-30 |
| CVE-2026-86397 | critical | 9.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-30 |
| CVE-2026-86396 | high | 8.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-30 |
| CVE-2026-84296 | medium | 6.8 | No | Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.... | 2026-10-30 |
| CVE-2026-84295 | critical | 10.0 | No | Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated... | 2026-10-30 |
| CVE-2026-75525 | medium | 5.3 | No | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an... | 2026-10-30 |
| CVE-2026-74755 | high | 7.5 | No | An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash a bRPC s... | 2026-10-30 |
| CVE-2026-65824 | high | 7.4 | No | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.1, an attac... | 2026-10-30 |
| CVE-2026-66392 | medium | 5.9 | No | Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the c... | 2026-10-30 |
| CVE-2026-65566 | high | 8.8 | No | Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Eng... | 2026-10-30 |