Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-21126 | not reported | — | No | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers... | 2026-10-16 |
| CVE-2026-21123 | not reported | — | No | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to acces... | 2026-10-16 |
| CVE-2026-21121 | not reported | — | No | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs. | 2026-10-16 |
| CVE-2026-111351 | medium | 4.2 | No | metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-pr... | 2026-10-16 |
| CVE-2026-111331 | medium | 6.3 | No | Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins... | 2026-10-16 |
| CVE-2026-108131 | high | 7.5 | No | No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 2026-10-16 |
| CVE-2026-105228 | not reported | — | No | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft. | 2026-10-16 |
| CVE-2026-105283 | not reported | — | No | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker... | 2026-10-16 |
| CVE-2026-105412 | high | 7.1 | No | An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database. | 2026-10-16 |
| CVE-2026-105411 | high | 8.1 | No | An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an... | 2026-10-16 |
| CVE-2026-105410 | high | 8.7 | No | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to exec... | 2026-10-16 |
| CVE-2026-105227 | not reported | — | No | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft. | 2026-10-16 |
| CVE-2026-104769 | medium | 5.9 | No | The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including,... | 2026-10-16 |
| CVE-2026-103502 | not reported | — | No | Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections to impersonate hex.pm... | 2026-10-16 |
| CVE-2026-102178 | critical | 9.8 | No | A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured... | 2026-10-16 |
| CVE-2026-102176 | high | 8.8 | No | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos... | 2026-10-16 |
| CVE-2026-102056 | high | 7.1 | No | An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent... | 2026-10-16 |
| CVE-2026-102053 | medium | 5.3 | No | An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Ev... | 2026-10-16 |
| CVE-2026-102050 | high | 8.8 | No | A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated... | 2026-10-16 |
| CVE-2026-102037 | high | 8.1 | No | An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an u... | 2026-10-16 |