Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-54546 | medium | 5.0 | No | CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated... | 2026-09-30 |
| CVE-2026-44235 | medium | 6.5 | No | rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHO... | 2026-09-30 |
| CVE-2026-85721 | high | 7.5 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2... | 2026-09-30 |
| CVE-2026-85718 | medium | 5.9 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3... | 2026-09-30 |
| CVE-2026-79752 | not reported | — | No | CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder... | 2026-09-30 |
| CVE-2026-81872 | not reported | — | No | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor... | 2026-09-30 |
| CVE-2026-81869 | not reported | — | No | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation pat... | 2026-09-30 |
| CVE-2026-62949 | medium | 6.5 | No | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyn... | 2026-09-30 |
| CVE-2026-81876 | high | 7.5 | No | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser... | 2026-09-30 |
| CVE-2026-81875 | high | 7.5 | No | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser... | 2026-09-30 |
| CVE-2026-63126 | high | 7.5 | No | Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not... | 2026-09-30 |
| CVE-2026-59823 | not reported | — | No | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller... | 2026-09-30 |
| CVE-2026-59974 | high | 7.8 | No | Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0,... | 2026-09-30 |
| CVE-2026-59944 | medium | 6.1 | No | Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised depende... | 2026-09-30 |
| CVE-2026-84997 | high | 7.5 | No | react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 0.6.0 until 1.11.1, React\Http\Io\ChunkedD... | 2026-09-30 |
| CVE-2026-77401 | medium | 6.8 | No | Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create an... | 2026-09-30 |
| CVE-2026-76821 | not reported | — | No | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion... | 2026-09-30 |
| CVE-2026-76820 | high | 7.7 | No | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFe... | 2026-09-30 |
| CVE-2026-55226 | medium | 5.4 | No | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and... | 2026-09-30 |
| CVE-2026-55225 | high | 8.0 | No | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and... | 2026-09-30 |