Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-19086 low 3.3 No IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker c... 2026-09-16
CVE-2026-18069 medium 6.0 No IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to tim... 2026-09-16
CVE-2026-66307 high 7.5 No Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network. 2026-09-16
CVE-2026-66306 medium 6.5 No Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information o... 2026-09-16
CVE-2026-66305 high 7.1 No Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network. 2026-09-16
CVE-2026-89158 medium 6.5 No PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write. 2026-09-16
CVE-2026-66304 high 7.5 No Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network. 2026-09-16
CVE-2026-66303 medium 6.5 No Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network. 2026-09-16
CVE-2026-66302 critical 9.8 No External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network. 2026-09-16
CVE-2026-12742 medium 5.4 No IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due t... 2026-09-16
CVE-2026-12358 high 7.5 No IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request res... 2026-09-16
CVE-2026-11926 high 7.5 No IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request res... 2026-09-16
CVE-2026-18251 medium 4.3 No IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origi... 2026-09-16
CVE-2026-17467 high 8.2 No IBM Cloud Pak for Data System (Yosemite 1.0) 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or... 2026-09-16
CVE-2026-17463 medium 6.5 No IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote auth... 2026-09-16
CVE-2026-17416 high 7.8 No IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code... 2026-09-16
CVE-2026-17156 high 7.8 No IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code... 2026-09-16
CVE-2026-17133 high 7.8 No IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code... 2026-09-16
CVE-2026-17047 medium 5.4 No IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation. 2026-09-16
CVE-2026-16702 medium 6.5 No IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote auth... 2026-09-16