Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-10658 | high | 7.1 | No | bt_iso_recv() in subsys/bluetooth/host/iso.c pulled the ISO SDU header (4 bytes) or, when the timestamp flag is set, the timestamped SDU hea... | 2026-11-04 |
| CVE-2026-10643 | high | 7.8 | No | Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary... | 2026-11-04 |
| CVE-2026-10651 | medium | 6.5 | No | bt_sdp_parse_attribute() in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record buffer held the type-marker byte plus the... | 2026-11-04 |
| CVE-2026-10645 | medium | 5.5 | No | The Zephyr ext2 filesystem driver (subsys/fs/ext2) trusted the on-disk directory entry fields de_rec_len and de_name_len when walking a dire... | 2026-11-04 |
| CVE-2026-10642 | medium | 6.5 | No | The Zephyr PL011 UART driver (drivers/serial/uart_pl011.c) contains an unbounded software loop in pl011_irq_tx_enable() that repeatedly invo... | 2026-11-04 |
| CVE-2026-10641 | high | 7.1 | No | Zephyr's Bluetooth Classic Hands-Free Profile (HFP) Hands-Free role parser (subsys/bluetooth/host/classic/hfp_hf.c) contains an out-of-bound... | 2026-11-04 |
| CVE-2026-10593 | medium | 6.5 | No | The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications. In unicast_client_e... | 2026-11-04 |
| CVE-2026-0053 | high | 8.4 | No | In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation... | 2026-11-04 |
| CVE-2026-49293 | high | 7.5 | No | js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Versions up to and including 1.1.1 parse hexadecimal / oc... | 2026-11-04 |
| CVE-2026-45109 | high | 7.5 | No | Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix a... | 2026-11-04 |
| CVE-2026-44009 | critical | 9.8 | No | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to w... | 2026-11-04 |
| CVE-2026-44008 | critical | 9.8 | No | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other... | 2026-11-04 |
| CVE-2026-44007 | critical | 9.1 | No | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally... | 2026-11-04 |
| CVE-2026-39892 | critical | 9.8 | No | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a n... | 2026-11-04 |
| CVE-2026-121802 | critical | 9.1 | No | @better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), bec... | 2026-11-04 |
| CVE-2026-121618 | medium | 5.3 | No | A weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of the file /cgi-bin/fqc.cgi of the component Factory... | 2026-11-04 |
| CVE-2026-121617 | high | 7.5 | No | A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function init_multipart of the file /cgi-bin/up... | 2026-11-04 |
| CVE-2026-121616 | medium | 5.3 | No | A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the function strcpy of the file /cgi-bin/mesh_lo... | 2026-11-04 |
| CVE-2026-121615 | critical | 10.0 | No | A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function of the file /cgi-bin/mesh_login.cgi of the compone... | 2026-11-04 |
| CVE-2026-119415 | low | 3.7 | No | CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to inject MIME part headers via unsani... | 2026-11-04 |