Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-98419 | high | 7.0 | No | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out-of-bounds write in reset_per_cpu_data() In reset... | 2026-10-24 |
| CVE-2026-98405 | high | 8.1 | No | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In par... | 2026-10-24 |
| CVE-2026-98401 | high | 7.5 | No | In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation... | 2026-10-24 |
| CVE-2026-98385 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently t... | 2026-10-24 |
| CVE-2026-98383 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL p... | 2026-10-24 |
| CVE-2026-98382 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices __bpf_offload_dev... | 2026-10-24 |
| CVE-2026-98381 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth_set_chann... | 2026-10-24 |
| CVE-2026-98378 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpf_link_prime() inserts a... | 2026-10-24 |
| CVE-2026-98376 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inner map replacement p... | 2026-10-24 |
| CVE-2026-98374 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Wh... | 2026-10-24 |
| CVE-2026-76886 | critical | 9.8 | No | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | 2026-10-24 |
| CVE-2026-9205 | critical | 9.8 | No | IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function. | 2026-10-24 |
| CVE-2026-8470 | critical | 9.1 | No | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic r... | 2026-10-24 |
| CVE-2026-58662 | critical | 9.1 | No | Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apac... | 2026-10-24 |
| CVE-2026-58023 | critical | 9.1 | No | Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended... | 2026-10-24 |
| CVE-2026-55971 | critical | 9.8 | No | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recomme... | 2026-10-24 |
| CVE-2026-48144 | critical | 9.1 | No | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: bef... | 2026-10-24 |
| CVE-2026-58630 | critical | 9.8 | No | Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network. | 2026-10-24 |
| CVE-2026-62825 | critical | 9.8 | No | Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network. | 2026-10-24 |
| CVE-2026-58275 | critical | 9.8 | No | Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network. | 2026-10-24 |