Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-25827 | low | 2.3 | No | An issue was discovered in Keyfactor SignServer before 7.6.0. A number of properties were identified to not have any restrictions to what pa... | 2026-09-22 |
| CVE-2026-25826 | medium | 4.9 | No | An issue was discovered in Keyfactor SignServer before 7.6.0. The attribute ATTRIBUTESFILE in PKCS11CryptoToken can be set to a readable fil... | 2026-09-22 |
| CVE-2026-25825 | low | 2.7 | No | An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set t... | 2026-09-22 |
| CVE-2026-71198 | not reported | — | No | In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the... | 2026-09-22 |
| CVE-2026-25832 | low | 3.7 | No | In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group. | 2026-09-22 |
| CVE-2023-45858 | high | 8.6 | No | A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files. | 2026-09-22 |
| CVE-2023-37366 | low | 2.8 | No | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 98... | 2026-09-22 |
| CVE-2023-32803 | high | 7.5 | No | The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root cert... | 2026-09-22 |
| CVE-2023-29377 | medium | 6.6 | No | An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames... | 2026-09-22 |
| CVE-2023-28148 | high | 7.2 | No | A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520. | 2026-09-22 |
| CVE-2023-24035 | low | 3.5 | No | An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads... | 2026-09-22 |
| CVE-2023-24034 | low | 3.1 | No | An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by usin... | 2026-09-22 |
| CVE-2023-22632 | low | 2.7 | No | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor. | 2026-09-22 |
| CVE-2026-33970 | low | 3.5 | No | An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330... | 2026-09-22 |
| CVE-2026-33968 | low | 2.8 | No | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera drive... | 2026-09-22 |
| CVE-2026-33967 | low | 2.8 | No | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera drive... | 2026-09-22 |
| CVE-2026-33966 | low | 2.8 | No | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak... | 2026-09-22 |
| CVE-2026-33964 | medium | 6.4 | No | An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed... | 2026-09-22 |
| CVE-2026-33963 | high | 7.5 | No | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffe... | 2026-09-22 |
| CVE-2026-33962 | low | 2.8 | No | An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink c... | 2026-09-22 |