Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-54426 | high | 7.5 | No | Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client proc... | 2026-10-30 |
| CVE-2026-54425 | high | 7.5 | No | Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial of service by sendin... | 2026-10-30 |
| CVE-2026-48830 | critical | 9.1 | No | Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication for protected non-bu... | 2026-10-30 |
| CVE-2026-13002 | not reported | — | No | Rejected reason: Rejected as this CVE is duplicate to CVE-2026-4890. | 2026-10-30 |
| CVE-2026-119578 | high | 7.8 | No | MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Pyth... | 2026-10-30 |
| CVE-2026-114148 | high | 7.8 | No | Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. | 2026-10-30 |
| CVE-2026-105044 | not reported | — | No | Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Sec... | 2026-10-30 |
| CVE-2026-114721 | low | 3.1 | No | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed. The check compared... | 2026-10-30 |
| CVE-2026-101770 | high | 8.1 | No | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected... | 2026-10-30 |
| CVE-2026-112556 | medium | 4.8 | No | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe... | 2026-10-30 |
| CVE-2026-113947 | high | 8.8 | No | This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted a... | 2026-10-30 |
| CVE-2026-83719 | medium | 5.5 | No | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. | 2026-10-30 |
| CVE-2026-106634 | high | 7.7 | No | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that... | 2026-10-30 |
| CVE-2026-107305 | medium | 5.4 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker... | 2026-10-30 |
| CVE-2026-103092 | high | 8.8 | No | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper access c... | 2026-10-30 |
| CVE-2026-83699 | high | 7.8 | No | Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | 2026-10-30 |
| CVE-2026-104309 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation... | 2026-10-30 |
| CVE-2026-104314 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow to retrieve the flow... | 2026-10-30 |
| CVE-2026-104316 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sendin... | 2026-10-30 |
| CVE-2026-104328 | high | 8.8 | No | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization o... | 2026-10-30 |