Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82368 | not reported | — | No | Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to co... | 2026-10-01 |
| CVE-2026-14443 | not reported | — | No | Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared... | 2026-10-01 |
| CVE-2026-14442 | not reported | — | No | An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application lo... | 2026-10-01 |
| CVE-2026-14441 | not reported | — | No | A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific use... | 2026-10-01 |
| CVE-2021-27065 | high | 7.8 | Listed | Microsoft Exchange Server Remote Code Execution Vulnerability | 2026-10-01 |
| CVE-2023-46805 | high | 8.2 | Listed | An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to acc... | 2026-10-01 |
| CVE-2021-20023 | medium | 4.9 | Listed | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on th... | 2026-10-01 |
| CVE-2021-26858 | high | 7.8 | Listed | Microsoft Exchange Server Remote Code Execution Vulnerability | 2026-10-01 |
| CVE-2021-26411 | high | 8.8 | Listed | Internet Explorer Memory Corruption Vulnerability | 2026-10-01 |
| CVE-2021-20022 | high | 7.2 | Listed | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to... | 2026-10-01 |
| CVE-2019-2725 | critical | 9.8 | Listed | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are... | 2026-10-01 |
| CVE-2018-19323 | critical | 9.8 | Listed | The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26,... | 2026-10-01 |
| CVE-2026-101322 | not reported | — | No | In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastru... | 2026-10-01 |
| CVE-2026-97662 | high | 8.2 | No | An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent t... | 2026-10-01 |
| CVE-2026-8618 | not reported | — | No | A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insufficient validation of d... | 2026-10-01 |
| CVE-2026-78578 | not reported | — | No | Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticate... | 2026-10-01 |
| CVE-2026-78577 | not reported | — | No | Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, a... | 2026-10-01 |
| CVE-2026-102369 | not reported | — | No | Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handl... | 2026-10-01 |
| CVE-2026-14316 | high | 8.1 | No | The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for... | 2026-10-01 |
| CVE-2026-9864 | medium | 4.8 | No | Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated... | 2026-10-01 |