Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-73451 | medium | 4.8 | No | On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SV... | 2026-09-16 |
| CVE-2026-19641 | medium | 5.3 | No | On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authenticat... | 2026-09-16 |
| CVE-2026-73449 | medium | 5.9 | No | On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authoriza... | 2026-09-16 |
| CVE-2026-84397 | medium | 5.4 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker... | 2026-09-16 |
| CVE-2026-69921 | high | 7.8 | No | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 2026-09-16 |
| CVE-2026-92406 | high | 7.3 | No | A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file... | 2026-09-16 |
| CVE-2026-69910 | critical | 9.8 | No | Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. | 2026-09-16 |
| CVE-2026-69907 | high | 7.8 | No | Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate pr... | 2026-09-16 |
| CVE-2026-69900 | high | 7.8 | No | Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. | 2026-09-16 |
| CVE-2026-89162 | low | 3.3 | No | In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available... | 2026-09-16 |
| CVE-2026-43686 | high | 8.8 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27,... | 2026-09-16 |
| CVE-2026-65402 | medium | 5.5 | No | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27,... | 2026-09-16 |
| CVE-2026-65405 | medium | 5.5 | No | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadO... | 2026-09-16 |
| CVE-2026-65409 | medium | 5.5 | No | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, m... | 2026-09-16 |
| CVE-2026-84487 | medium | 6.5 | No | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mac... | 2026-09-16 |
| CVE-2026-84492 | medium | 4.7 | No | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Go... | 2026-09-16 |
| CVE-2026-45768 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.... | 2026-09-16 |
| CVE-2026-45769 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.... | 2026-09-16 |
| CVE-2026-45770 | high | 7.5 | No | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.... | 2026-09-16 |
| CVE-2026-84561 | critical | 9.8 | No | A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, ma... | 2026-09-16 |