Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-11375 | high | 8.8 | No | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overfl... | 2026-09-23 |
| CVE-2026-11378 | high | 8.8 | No | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow i... | 2026-09-23 |
| CVE-2026-52828 | not reported | — | No | Kimai is an open-source time tracking application. Prior to 2.58.0, ExportController::createExportTemplate() and ExportController::editExpor... | 2026-09-23 |
| CVE-2026-52826 | not reported | — | No | Kimai is an open-source time tracking application. Prior to 2.57.0, GET or POST requests to /en/admin/project/{id}/rate/{rate}, /en/admin/cu... | 2026-09-23 |
| CVE-2026-52825 | not reported | — | No | Kimai is an open-source time tracking application. Prior to 2.58.0, POST /api/teams/{id}/members/{userId} and POST /api/teams/{id}/activitie... | 2026-09-23 |
| CVE-2026-52823 | not reported | — | No | Kimai is an open-source time tracking application. Prior to 2.58.0, TimesheetController exposes GET /api/timesheets/{id}/stop and GET /api/t... | 2026-09-23 |
| CVE-2026-52822 | not reported | — | No | Kimai is an open-source time tracking application. Prior to 2.58.0, PATCH /api/timesheets/{id}/restart, PATCH /api/timesheets/{id}/duplicate... | 2026-09-23 |
| CVE-2026-52820 | not reported | — | No | Kimai is an open-source time tracking application. Prior to 2.57.0, PATCH /api/timesheets/{id} and POST /api/timesheets accept a user-contro... | 2026-09-23 |
| CVE-2026-52819 | not reported | — | No | Kimai is an open-source time tracking application. Prior to 2.57.0, the GET /api/timesheets list endpoint accepts user and users[] target id... | 2026-09-23 |
| CVE-2026-49992 | not reported | — | No | Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain authenticated cross-site request forgery issues in their... | 2026-09-23 |
| CVE-2026-49865 | not reported | — | No | Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain a server-side request forgery vulnerability in their inv... | 2026-09-23 |
| CVE-2026-85102 | critical | 9.8 | Listed | Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote att... | 2026-09-23 |
| CVE-2026-62263 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.2, WebAuthnAuthentication.deserialize applies an ObjectInput... | 2026-09-23 |
| CVE-2026-53660 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirector... | 2026-09-23 |
| CVE-2026-48717 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a code_verifie... | 2026-09-23 |
| CVE-2026-47424 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-... | 2026-09-23 |
| CVE-2026-46498 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, OAuthTokenStore reads caller-supplied token identifiers f... | 2026-09-23 |
| CVE-2026-45051 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, WebAuthnAuthentication loads a serialized AuthenticatorIm... | 2026-09-23 |
| CVE-2026-44793 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, certain federation endpoints in a non-default clustered c... | 2026-09-23 |
| CVE-2026-41573 | not reported | — | No | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection() passes the _queryId... | 2026-09-23 |