Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92718 | high | 7.3 | No | Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums. Attacker... | 2026-09-24 |
| CVE-2026-89028 | high | 7.5 | No | MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to co... | 2026-09-24 |
| CVE-2026-39919 | critical | 9.8 | No | Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that a... | 2026-09-24 |
| CVE-2026-91752 | high | 7.5 | No | GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-... | 2026-09-24 |
| CVE-2026-89021 | medium | 6.9 | No | MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attack... | 2026-09-24 |
| CVE-2026-57843 | medium | 5.5 | No | NetBSD contains an information disclosure vulnerability in mm_open() within sys/dev/mm.c that allows unprivileged local users to obtain real... | 2026-09-24 |
| CVE-2026-96748 | medium | 6.5 | No | PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimite... | 2026-09-24 |
| CVE-2026-86859 | not reported | — | No | ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if... | 2026-09-24 |
| CVE-2026-86858 | not reported | — | No | ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue c... | 2026-09-24 |
| CVE-2026-13016 | not reported | — | No | ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable a... | 2026-09-24 |
| CVE-2026-94281 | medium | 6.5 | No | An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an at... | 2026-09-24 |
| CVE-2026-93545 | medium | 6.5 | No | An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X clien... | 2026-09-24 |
| CVE-2026-93544 | medium | 6.5 | No | An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attac... | 2026-09-24 |
| CVE-2026-93543 | high | 7.4 | No | An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. | 2026-09-24 |
| CVE-2026-93542 | medium | 6.5 | No | An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous ser... | 2026-09-24 |
| CVE-2026-88382 | high | 7.5 | No | hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. | 2026-09-24 |
| CVE-2026-96744 | high | 7.1 | No | Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can... | 2026-09-24 |
| CVE-2026-93541 | medium | 6.5 | No | An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a | 2026-09-24 |
| CVE-2026-77798 | medium | 6.5 | No | Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock management bug in the u... | 2026-09-24 |
| CVE-2026-77797 | low | 3.6 | No | Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files... | 2026-09-24 |