Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-49995 | not reported | — | No | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the newsletter cron field stored in the news... | 2026-09-22 |
| CVE-2026-69694 | high | 7.0 | No | Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locall... | 2026-09-22 |
| CVE-2026-72946 | high | 7.8 | No | Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally. | 2026-09-22 |
| CVE-2026-78463 | high | 8.8 | No | Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a ne... | 2026-09-22 |
| CVE-2026-80074 | high | 8.8 | No | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 2026-09-22 |
| CVE-2026-84659 | medium | 4.3 | No | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force th... | 2026-09-22 |
| CVE-2026-80077 | high | 8.8 | No | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 2026-09-22 |
| CVE-2026-72936 | high | 8.1 | No | Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network. | 2026-09-22 |
| CVE-2026-69641 | critical | 9.1 | No | Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 2026-09-22 |
| CVE-2026-72940 | high | 8.8 | No | Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network. | 2026-09-22 |
| CVE-2026-86482 | high | 8.8 | No | In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation | 2026-09-22 |
| CVE-2026-69664 | not reported | — | No | Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to ca... | 2026-09-22 |
| CVE-2026-93296 | not reported | — | No | MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics views. The event General card and the ser... | 2026-09-22 |
| CVE-2026-93295 | not reported | — | No | MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user. Background job arg... | 2026-09-22 |
| CVE-2026-94301 | critical | 9.8 | No | The fix for CVE-2026-47065/ZDRES-232 ("resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy"), releas... | 2026-09-22 |
| CVE-2026-87288 | high | 8.1 | No | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalV... | 2026-09-22 |
| CVE-2026-87287 | high | 8.1 | No | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalV... | 2026-09-22 |
| CVE-2026-87286 | high | 8.1 | No | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalV... | 2026-09-22 |
| CVE-2026-83408 | high | 8.1 | No | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is a... | 2026-09-22 |
| CVE-2026-83357 | high | 8.1 | No | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is a... | 2026-09-22 |