Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81475 | critical | 9.8 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An... | 2026-10-01 |
| CVE-2026-81476 | critical | 9.8 | No | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Comm... | 2026-10-01 |
| CVE-2026-58600 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally. | 2026-10-01 |
| CVE-2026-58599 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. | 2026-10-01 |
| CVE-2026-82829 | critical | 9.8 | No | Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauth... | 2026-10-01 |
| CVE-2026-82828 | high | 8.8 | No | Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-le... | 2026-10-01 |
| CVE-2026-82827 | critical | 9.8 | No | Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret... | 2026-10-01 |
| CVE-2026-82826 | high | 7.5 | No | Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attack... | 2026-10-01 |
| CVE-2026-82825 | critical | 9.8 | No | Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticat... | 2026-10-01 |
| CVE-2026-82824 | critical | 9.8 | No | Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, mo... | 2026-10-01 |
| CVE-2026-78249 | not reported | — | No | A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571... | 2026-10-01 |
| CVE-2026-78210 | not reported | — | No | In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without... | 2026-10-01 |
| CVE-2026-76147 | not reported | — | No | A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Ge... | 2026-10-01 |
| CVE-2026-76146 | not reported | — | No | An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to exe... | 2026-10-01 |
| CVE-2026-76145 | not reported | — | No | An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force... | 2026-10-01 |
| CVE-2026-76144 | not reported | — | No | An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attac... | 2026-10-01 |
| CVE-2026-76143 | not reported | — | No | A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login req... | 2026-10-01 |
| CVE-2026-76142 | not reported | — | No | Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthe... | 2026-10-01 |
| CVE-2026-71899 | medium | 6.5 | No | A missing authorization vulnerability exists in the `query-dynamic-sub-workflows` API of Apache DolphinScheduler. The API does not properly... | 2026-10-01 |
| CVE-2026-67987 | high | 7.5 | No | crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions i... | 2026-10-01 |