Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-93851 | high | 8.0 | No | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the target post ID in the Agents plugin's mention... | 2026-10-30 |
| CVE-2026-90720 | medium | 6.7 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-30 |
| CVE-2026-86393 | high | 7.2 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-30 |
| CVE-2026-86389 | high | 7.2 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-30 |
| CVE-2026-86395 | high | 7.2 | No | Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.... | 2026-10-30 |
| CVE-2026-21157 | not reported | — | No | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity. | 2026-10-30 |
| CVE-2026-20589 | medium | 6.7 | No | In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious acto... | 2026-10-30 |
| CVE-2026-20588 | medium | 6.7 | No | In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a ma... | 2026-10-30 |
| CVE-2026-20470 | medium | 6.2 | No | In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure... | 2026-10-30 |
| CVE-2026-20587 | medium | 6.7 | No | In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious... | 2026-10-30 |
| CVE-2026-20586 | high | 8.8 | No | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no ad... | 2026-10-30 |
| CVE-2026-20579 | medium | 6.7 | No | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious acto... | 2026-10-30 |
| CVE-2026-11822 | medium | 5.5 | No | SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the... | 2026-10-30 |
| CVE-2026-15801 | high | 8.0 | No | A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers f... | 2026-10-30 |
| CVE-2026-13116 | medium | 4.3 | No | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up t... | 2026-10-30 |
| CVE-2026-107444 | medium | 4.3 | No | A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories... | 2026-10-29 |
| CVE-2026-68563 | medium | 5.5 | No | A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the `leapp_old_postgre... | 2026-10-29 |
| CVE-2026-68562 | medium | 6.2 | No | A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can m... | 2026-10-29 |
| CVE-2026-93589 | high | 7.5 | No | ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in t... | 2026-10-29 |
| CVE-2026-93588 | medium | 4.3 | No | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When the coder reaches a memory (reso... | 2026-10-29 |