Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102711 | not reported | — | No | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders take a module image without its length and trust the size... | 2026-11-04 |
| CVE-2026-110944 | not reported | — | No | Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server. | 2026-11-04 |
| CVE-2024-33605 | high | 7.5 | No | Improper processing of some parameters of installed_emanual_list.html and installed_emanual_down.html leads to a path traversal vulnerabilit... | 2026-11-04 |
| CVE-2026-87044 | medium | 6.5 | No | The Mbed TLS crypto shim driver in drivers/crypto/crypto_mbedtls_shim.c drives PSA multipart cipher and AEAD operations. In mbedtls_cbc() an... | 2026-11-04 |
| CVE-2026-87043 | medium | 4.8 | No | The entropy-device random number generator in subsys/random/random_entropy_device.c returned early with -ENODEV from rand_get() as soon as d... | 2026-11-04 |
| CVE-2026-87041 | high | 7.8 | No | The RTIO submission-queue verifier rtio_vrfy_sqe() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0) accumulated th... | 2026-11-04 |
| CVE-2026-92615 | medium | 6.6 | No | A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which... | 2026-11-04 |
| CVE-2026-87040 | high | 8.3 | No | The nRF link-layer receive paths of the open-source Bluetooth LE Controller did not validate the on-air LENGTH field of a received PDU again... | 2026-11-04 |
| CVE-2026-87039 | high | 7.8 | No | The user-mode syscall verifier z_vrfy_i2s_configure() in drivers/i2s/i2s_handlers.c copies the caller's struct i2s_config in from user memor... | 2026-11-04 |
| CVE-2026-87038 | high | 7.0 | No | The user-mode verification handler for the i3c_transfer() system call, z_vrfy_i3c_transfer() in drivers/i3c/i3c_handlers.c, validated the ca... | 2026-11-04 |
| CVE-2026-85036 | medium | 5.7 | No | The Bluetooth Classic AVDTP layer defers releasing a session's stream endpoints: bt_avdtp_l2cap_disconnected() in subsys/bluetooth/host/clas... | 2026-11-04 |
| CVE-2026-54099 | high | 8.8 | No | A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validate... | 2026-11-04 |
| CVE-2026-16511 | high | 8.8 | No | Two RTIO syscall verifiers, in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0), did not validate user-supplied point... | 2026-11-04 |
| CVE-2026-2625 | medium | 5.5 | No | A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (R... | 2026-11-04 |
| CVE-2026-11753 | not reported | — | No | A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected into the HTT... | 2026-11-04 |
| CVE-2026-11749 | not reported | — | No | A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use, allowing rep... | 2026-11-04 |
| CVE-2026-115455 | medium | 6.5 | No | A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory alloc... | 2026-11-04 |
| CVE-2025-13327 | medium | 6.3 | No | A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specia... | 2026-11-04 |
| CVE-2025-11229 | high | 7.2 | No | The system fails to properly enforce scope authorization when the `authorize_all_scopes` configuration is enabled. This allows applications... | 2026-11-04 |
| CVE-2026-9728 | medium | 6.4 | No | The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->size fields by reading... | 2026-11-04 |