Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85951 | high | 8.5 | No | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnera... | 2026-10-15 |
| CVE-2026-65150 | high | 7.3 | No | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerab... | 2026-10-15 |
| CVE-2026-65149 | high | 7.3 | No | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnera... | 2026-10-15 |
| CVE-2026-65147 | high | 7.3 | No | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerab... | 2026-10-15 |
| CVE-2026-111141 | medium | 4.7 | No | zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to... | 2026-10-15 |
| CVE-2026-111123 | medium | 6.1 | No | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying u... | 2026-10-15 |
| CVE-2026-110874 | medium | 6.6 | No | Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in functions.lib.php, which calls unserialize()... | 2026-10-15 |
| CVE-2026-110378 | medium | 5.3 | No | Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-signature-contract-forms-add-on allows Exp... | 2026-10-15 |
| CVE-2026-109897 | medium | 5.4 | No | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Cont... | 2026-10-15 |
| CVE-2026-110715 | medium | 6.1 | No | MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt... | 2026-10-15 |
| CVE-2026-109776 | medium | 4.2 | No | Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.... | 2026-10-15 |
| CVE-2026-109757 | high | 8.3 | No | Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbir... | 2026-10-15 |
| CVE-2026-109755 | critical | 9.6 | No | Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-15 |
| CVE-2026-109753 | high | 8.1 | No | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, T... | 2026-10-15 |
| CVE-2026-109733 | high | 8.1 | No | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153... | 2026-10-15 |
| CVE-2026-109730 | high | 8.8 | No | Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird... | 2026-10-15 |
| CVE-2026-109723 | medium | 5.4 | No | Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, a... | 2026-10-15 |
| CVE-2026-109714 | medium | 5.4 | No | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 2026-10-15 |
| CVE-2026-109506 | not reported | — | No | Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow. An... | 2026-10-15 |
| CVE-2026-108185 | high | 7.4 | No | Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information... | 2026-10-15 |