Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-97311 | medium | 4.3 | No | A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associ... | 2026-09-24 |
| CVE-2026-97177 | medium | 6.6 | No | A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled, the system fa... | 2026-09-24 |
| CVE-2026-96808 | high | 7.4 | No | In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, valid... | 2026-09-24 |
| CVE-2026-96269 | not reported | — | No | GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affect... | 2026-09-24 |
| CVE-2026-28325 | high | 8.8 | No | SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deseri... | 2026-09-24 |
| CVE-2026-28324 | critical | 9.8 | No | SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insuffici... | 2026-09-24 |
| CVE-2026-92782 | high | 8.1 | No | Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access c... | 2026-09-24 |
| CVE-2026-92748 | high | 8.8 | No | BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to... | 2026-09-24 |
| CVE-2026-75649 | high | 7.8 | No | Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current... | 2026-09-24 |
| CVE-2026-92795 | medium | 6.5 | No | Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the... | 2026-09-24 |
| CVE-2026-92790 | medium | 6.5 | No | Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return... | 2026-09-24 |
| CVE-2026-92788 | high | 8.8 | No | Coze Studio through 0.5.1 fails to validate that table names in workflow SQL customization nodes belong to the caller's workspace. Authentic... | 2026-09-24 |
| CVE-2026-92785 | high | 8.1 | No | Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthentic... | 2026-09-24 |
| CVE-2026-92780 | high | 8.8 | No | KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access prot... | 2026-09-24 |
| CVE-2026-92765 | medium | 6.5 | No | ArcherySec through 2.0.6 fails to validate organization ownership in the WebScanVulnList endpoint, allowing authenticated users to read vuln... | 2026-09-24 |
| CVE-2026-92469 | high | 8.1 | No | zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the file-center module DELETE /files/{id} end... | 2026-09-24 |
| CVE-2026-92459 | medium | 6.5 | No | yshop-crm through 2.1.3 contains a missing authorization vulnerability in the CrmCluesController receiveCustomer endpoint that allows authen... | 2026-09-24 |
| CVE-2026-91987 | medium | 6.5 | No | atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the _estimate_batch_cost function that returns zero cost for unknown mo... | 2026-09-24 |
| CVE-2026-88097 | high | 7.8 | No | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-94054 | medium | 5.3 | No | Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write. | 2026-09-24 |