Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77021 | not reported | — | No | Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <2.3.0p51 and 2.2.0 (EOL) allows an attack... | 2026-09-21 |
| CVE-2026-52835 | not reported | — | No | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the import_config handler and the database_f... | 2026-09-21 |
| CVE-2026-2771 | critical | 9.8 | No | Undefined behavior in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Th... | 2026-09-21 |
| CVE-2026-69648 | high | 7.0 | No | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. | 2026-09-21 |
| CVE-2026-72964 | medium | 5.5 | No | Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering... | 2026-09-21 |
| CVE-2026-72962 | high | 8.2 | No | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | 2026-09-21 |
| CVE-2026-72953 | high | 7.8 | No | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | 2026-09-21 |
| CVE-2026-72947 | high | 7.0 | No | Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally. | 2026-09-21 |
| CVE-2026-72945 | medium | 5.5 | No | Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally. | 2026-09-21 |
| CVE-2026-72952 | high | 7.0 | No | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. | 2026-09-21 |
| CVE-2026-72949 | high | 7.5 | No | Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a... | 2026-09-21 |
| CVE-2026-72960 | high | 8.8 | No | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | 2026-09-21 |
| CVE-2026-69575 | high | 7.0 | No | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 2026-09-21 |
| CVE-2026-93978 | high | 7.3 | No | A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of th... | 2026-09-21 |
| CVE-2026-93973 | high | 7.3 | No | A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the fil... | 2026-09-21 |
| CVE-2026-93968 | low | 3.8 | No | A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of th... | 2026-09-21 |
| CVE-2026-93963 | medium | 6.3 | No | A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module... | 2026-09-21 |
| CVE-2026-93958 | critical | 9.1 | No | A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component... | 2026-09-21 |
| CVE-2026-93742 | critical | 9.9 | No | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/for... | 2026-09-21 |
| CVE-2026-92729 | high | 8.2 | No | SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthe... | 2026-09-21 |