Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102712 | not reported | — | No | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with DTLS server support, the NetX Secure DTLS server's ClientH... | 2026-11-04 |
| CVE-2026-12859 | medium | 6.5 | No | Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly... | 2026-11-04 |
| CVE-2026-12610 | medium | 6.4 | No | A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where... | 2026-11-04 |
| CVE-2026-102728 | high | 7.5 | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure TLS client's ServerHello parser and DTLS client's HelloVerif... | 2026-11-04 |
| CVE-2026-102727 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP server accepts the first connection to a passive data port without c... | 2026-11-04 |
| CVE-2026-102726 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the PPP IPCP code parses a peer's Configure-Nak without validating each opti... | 2026-11-04 |
| CVE-2026-102725 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, the MSRP parser uses the attribute list l... | 2026-11-04 |
| CVE-2026-102724 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, evicting the last attribute in an MRP par... | 2026-11-04 |
| CVE-2026-102723 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, the MSRP attribute lookup writes through... | 2026-11-04 |
| CVE-2026-95649 | not reported | — | No | IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or... | 2026-11-04 |
| CVE-2026-94460 | not reported | — | No | IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predi... | 2026-11-04 |
| CVE-2026-94459 | not reported | — | No | IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installatio... | 2026-11-04 |
| CVE-2026-120422 | not reported | — | No | Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The applicatio... | 2026-11-04 |
| CVE-2026-121259 | medium | 6.5 | No | A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or division by... | 2026-11-04 |
| CVE-2026-119728 | medium | 6.5 | No | A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file or network stream with m... | 2026-11-04 |
| CVE-2026-119727 | medium | 6.5 | No | A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Con... | 2026-11-04 |
| CVE-2026-102722 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP client in IPv4 passive mode opens its data connection to whatever ad... | 2026-11-04 |
| CVE-2026-102721 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the TFTP client copies the message of a received ERROR packet without boundi... | 2026-11-04 |
| CVE-2026-102720 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the DHCP client's option walk advances its offset one byte less than its rea... | 2026-11-04 |
| CVE-2026-102719 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server fills HelloVerifyRequest cookies from NX_RAND(),... | 2026-11-04 |