Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102030 | high | 7.5 | No | An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured MVPN neighbor t... | 2026-10-16 |
| CVE-2026-102029 | high | 7.5 | No | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an un... | 2026-10-16 |
| CVE-2026-102028 | high | 7.5 | No | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a rem... | 2026-10-16 |
| CVE-2026-102027 | high | 7.5 | No | An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved... | 2026-10-16 |
| CVE-2026-102026 | high | 7.5 | No | An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and J... | 2026-10-16 |
| CVE-2026-102025 | high | 7.5 | No | A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS... | 2026-10-16 |
| CVE-2026-102024 | high | 7.5 | No | An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an auth... | 2026-10-16 |
| CVE-2026-102023 | high | 7.5 | No | A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a den... | 2026-10-16 |
| CVE-2026-102022 | high | 7.5 | No | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacke... | 2026-10-16 |
| CVE-2026-102020 | high | 7.5 | No | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-bas... | 2026-10-16 |
| CVE-2026-107850 | medium | 4.3 | No | Contao is an Open Source CMS. From version 5.7.1 until 5.7.12, core-bundle/config/services.yaml registers the preview access voter as Contao... | 2026-10-16 |
| CVE-2026-107848 | low | 3.5 | No | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenListener validates REQUEST_TOKEN only for POST request... | 2026-10-16 |
| CVE-2026-78797 | critical | 9.8 | No | An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in tasks-lib.lua. | 2026-10-16 |
| CVE-2026-107845 | critical | 9.3 | No | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, an unauthenticated visitor can submit a comment whose email or web... | 2026-10-16 |
| CVE-2026-107844 | medium | 5.3 | No | Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled {path} parameter to the... | 2026-10-16 |
| CVE-2026-107843 | medium | 5.3 | No | Contao is an Open Source CMS. From version 4.1.0 until 5.3.50 and 5.7.12, ModuleRegistration::compile() enters its follow-up registration br... | 2026-10-16 |
| CVE-2026-107842 | medium | 5.3 | No | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, ModuleSearch can disclose protected page titles, URLs, and indexed... | 2026-10-16 |
| CVE-2026-75350 | high | 7.5 | No | EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Ge... | 2026-10-16 |
| CVE-2026-107841 | medium | 5.7 | No | pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-gu... | 2026-10-16 |
| CVE-2026-107840 | high | 7.5 | No | yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/se... | 2026-10-16 |