Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-47570 | high | 7.8 | No | NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker could cause a library to be loaded from... | 2026-10-02 |
| CVE-2026-47529 | medium | 6.7 | No | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write.... | 2026-10-02 |
| CVE-2026-14157 | not reported | — | No | Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via... | 2026-10-02 |
| CVE-2026-47527 | medium | 6.7 | No | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read... | 2026-10-02 |
| CVE-2026-47525 | medium | 6.7 | No | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an improper... | 2026-10-02 |
| CVE-2026-47524 | medium | 6.7 | No | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo... | 2026-10-02 |
| CVE-2026-13313 | not reported | — | No | An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass s... | 2026-10-02 |
| CVE-2026-103494 | medium | 6.6 | No | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes | 2026-10-02 |
| CVE-2026-102294 | not reported | — | No | TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value i... | 2026-10-02 |
| CVE-2019-1579 | high | 8.1 | Listed | Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or... | 2026-10-02 |
| CVE-2018-19949 | critical | 9.8 | Listed | If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue... | 2026-10-02 |
| CVE-2026-93463 | medium | 5.4 | No | A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary scrip... | 2026-10-02 |
| CVE-2024-14003 | critical | 9.8 | No | Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution (RCE) through its NRDP (Nagios Remote Data Processor) server pl... | 2026-10-02 |
| CVE-2024-13999 | critical | 9.8 | No | Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose the server's Active Directory (AD) or LDAP authentication toke... | 2026-10-02 |
| CVE-2024-13996 | critical | 9.8 | No | Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user's password was changed. As a r... | 2026-10-02 |
| CVE-2024-13994 | critical | 9.8 | No | Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins' option is enabled. Under thi... | 2026-10-02 |
| CVE-2026-82372 | not reported | — | No | Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-sh... | 2026-10-01 |
| CVE-2026-82371 | not reported | — | No | Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access... | 2026-10-01 |
| CVE-2026-82370 | not reported | — | No | Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbit... | 2026-10-01 |
| CVE-2026-82369 | not reported | — | No | Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break o... | 2026-10-01 |