Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-20038 | medium | 5.8 | No | A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an una... | 2026-10-08 |
| CVE-2026-20032 | medium | 4.4 | No | A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape... | 2026-10-08 |
| CVE-2026-102828 | critical | 9.8 | No | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript... | 2026-10-08 |
| CVE-2026-13046 | high | 7.2 | No | A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacke... | 2026-10-08 |
| CVE-2026-13224 | medium | 4.9 | No | A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary fil... | 2026-10-08 |
| CVE-2026-18105 | medium | 6.5 | No | An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, authenticated user to... | 2026-10-08 |
| CVE-2026-18145 | high | 7.2 | No | A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker wi... | 2026-10-08 |
| CVE-2026-86101 | medium | 6.5 | No | An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access... | 2026-10-08 |
| CVE-2026-90979 | high | 7.3 | No | LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substituting the placeholders %u, %dn... | 2026-10-08 |
| CVE-2026-91006 | high | 8.8 | No | Apache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a child Karaf JVM by string concaten... | 2026-10-08 |
| CVE-2026-32582 | medium | 6.5 | No | Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This... | 2026-10-08 |
| CVE-2026-107702 | medium | 4.3 | No | QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminHotelRoomsBookingController::postProcess() that allows restrict... | 2026-10-08 |
| CVE-2020-9548 | critical | 9.8 | No | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.antero... | 2026-10-08 |
| CVE-2019-20330 | critical | 9.8 | No | FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking. | 2026-10-08 |
| CVE-2026-104714 | high | 8.8 | No | Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localize... | 2026-10-08 |
| CVE-2026-104713 | medium | 6.5 | No | Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory with... | 2026-10-08 |
| CVE-2026-104712 | high | 7.5 | No | Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision... | 2026-10-08 |
| CVE-2026-42617 | high | 7.1 | No | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in th... | 2026-10-08 |
| CVE-2026-42618 | high | 7.1 | No | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of... | 2026-10-08 |
| CVE-2026-46571 | medium | 5.5 | No | In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read poss... | 2026-10-08 |