Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-18439 | medium | 4.3 | No | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up t... | 2026-09-23 |
| CVE-2026-85501 | high | 7.5 | No | Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degra... | 2026-09-23 |
| CVE-2026-84618 | medium | 5.5 | No | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.... | 2026-09-23 |
| CVE-2026-84619 | medium | 6.1 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, m... | 2026-09-23 |
| CVE-2026-84621 | medium | 5.5 | No | An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, ma... | 2026-09-23 |
| CVE-2026-84623 | high | 7.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27.... | 2026-09-23 |
| CVE-2026-84624 | medium | 5.5 | No | A permissions issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macO... | 2026-09-23 |
| CVE-2026-84625 | critical | 9.1 | No | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, v... | 2026-09-23 |
| CVE-2026-84628 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS... | 2026-09-23 |
| CVE-2026-49887 | high | 7.8 | No | In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass.... | 2026-09-23 |
| CVE-2026-10027 | critical | 9.8 | No | IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malform... | 2026-09-23 |
| CVE-2026-10575 | high | 8.8 | No | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow w... | 2026-09-23 |
| CVE-2026-59814 | high | 7.6 | No | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, Joplin Server's GE... | 2026-09-23 |
| CVE-2026-55210 | high | 7.4 | No | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's Us... | 2026-09-23 |
| CVE-2026-59816 | medium | 4.3 | No | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.7, the GET /api/trans... | 2026-09-23 |
| CVE-2026-55179 | medium | 6.5 | No | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GE... | 2026-09-23 |
| CVE-2026-49453 | high | 7.0 | No | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, Joplin... | 2026-09-23 |
| CVE-2026-49450 | high | 7.1 | No | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Desktop for... | 2026-09-23 |
| CVE-2026-61747 | medium | 4.3 | No | InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, the /api/importer/row/ and /api/importer/mapping/ endpoints do not... | 2026-09-23 |
| CVE-2026-61746 | medium | 5.3 | No | InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, PluginSettingList, PluginAllSettingList, and PluginSettingDetail se... | 2026-09-23 |