Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-8849 | not reported | — | No | Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professiona... | 2026-09-23 |
| CVE-2026-86805 | medium | 6.3 | No | A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44... | 2026-09-23 |
| CVE-2026-84395 | high | 7.1 | No | Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation potentially resulti... | 2026-09-23 |
| CVE-2026-81999 | high | 8.7 | No | Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalati... | 2026-09-23 |
| CVE-2026-7866 | not reported | — | No | Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext P... | 2026-09-23 |
| CVE-2026-74849 | critical | 9.8 | No | Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA clie... | 2026-09-23 |
| CVE-2026-17262 | medium | 5.4 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication comm... | 2026-09-23 |
| CVE-2026-93676 | low | 3.2 | No | xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sa... | 2026-09-22 |
| CVE-2026-92526 | medium | 6.3 | No | A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Exe... | 2026-09-22 |
| CVE-2026-20282 | medium | 4.9 | No | A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an a... | 2026-09-22 |
| CVE-2026-20235 | medium | 4.9 | No | A vulnerability in the API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view sensitive informati... | 2026-09-22 |
| CVE-2026-65393 | medium | 5.5 | No | A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to acc... | 2026-09-22 |
| CVE-2026-44756 | critical | 10.0 | No | A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticat... | 2026-09-22 |
| CVE-2026-18730 | high | 7.4 | No | A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to ca... | 2026-09-22 |
| CVE-2026-93839 | critical | 9.8 | No | LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allows unauthenticated at... | 2026-09-22 |
| CVE-2026-73749 | critical | 9.8 | No | Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote at... | 2026-09-22 |
| CVE-2026-73750 | high | 8.8 | No | Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacke... | 2026-09-22 |
| CVE-2026-73751 | high | 8.8 | No | An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary... | 2026-09-22 |
| CVE-2026-73752 | high | 8.8 | No | An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability all... | 2026-09-22 |
| CVE-2026-63104 | high | 8.1 | No | Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or... | 2026-09-22 |