Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-15074 | critical | 9.8 | No | A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file... | 2026-10-07 |
| CVE-2025-15073 | critical | 9.8 | No | A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contact_us... | 2026-10-07 |
| CVE-2026-28625 | high | 7.8 | No | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privil... | 2026-10-07 |
| CVE-2026-28640 | high | 7.8 | No | In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input... | 2026-10-07 |
| CVE-2026-28641 | high | 7.8 | No | In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic e... | 2026-10-07 |
| CVE-2026-28647 | high | 7.8 | No | In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This cou... | 2026-10-07 |
| CVE-2026-28648 | high | 7.8 | No | In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additi... | 2026-10-07 |
| CVE-2026-28667 | medium | 5.5 | No | In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local informati... | 2026-10-07 |
| CVE-2026-45524 | high | 8.8 | No | In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local esca... | 2026-10-07 |
| CVE-2026-49878 | high | 7.2 | No | In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This coul... | 2026-10-07 |
| CVE-2026-18176 | high | 7.4 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext... | 2026-10-07 |
| CVE-2026-18173 | low | 3.7 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper e... | 2026-10-07 |
| CVE-2026-18172 | high | 7.4 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper r... | 2026-10-07 |
| CVE-2026-49880 | high | 7.8 | No | In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local e... | 2026-10-07 |
| CVE-2026-18137 | high | 8.1 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to imprope... | 2026-10-07 |
| CVE-2026-18177 | high | 7.1 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to mi... | 2026-10-07 |
| CVE-2026-18179 | medium | 6.5 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper aut... | 2026-10-07 |
| CVE-2026-18180 | medium | 6.5 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due... | 2026-10-07 |
| CVE-2026-49885 | high | 7.8 | No | In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation... | 2026-10-07 |
| CVE-2026-18181 | high | 8.1 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive inf... | 2026-10-07 |