Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84546 | high | 8.4 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS... | 2026-09-16 |
| CVE-2026-84523 | medium | 5.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS... | 2026-09-16 |
| CVE-2026-84497 | high | 7.8 | No | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS... | 2026-09-16 |
| CVE-2026-65406 | medium | 5.5 | No | A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Ga... | 2026-09-16 |
| CVE-2026-65395 | medium | 6.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS... | 2026-09-16 |
| CVE-2026-84611 | high | 7.3 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS... | 2026-09-16 |
| CVE-2026-84612 | medium | 5.5 | No | An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, ma... | 2026-09-16 |
| CVE-2026-84629 | high | 7.5 | No | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27.... | 2026-09-16 |
| CVE-2026-84630 | medium | 4.7 | No | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Go... | 2026-09-16 |
| CVE-2026-84632 | high | 7.3 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G... | 2026-09-16 |
| CVE-2026-86881 | critical | 9.1 | No | A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 a... | 2026-09-16 |
| CVE-2026-86882 | medium | 6.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS... | 2026-09-16 |
| CVE-2026-84583 | medium | 5.5 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS... | 2026-09-16 |
| CVE-2026-92401 | high | 7.3 | No | A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects the function to... | 2026-09-16 |
| CVE-2026-92398 | critical | 9.1 | No | A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_c... | 2026-09-16 |
| CVE-2026-85732 | medium | 4.7 | No | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute U... | 2026-09-16 |
| CVE-2026-85731 | high | 8.8 | No | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, content/file.Store extraction of OCI layers marked with io.deis.oras.con... | 2026-09-16 |
| CVE-2026-57148 | critical | 9.8 | No | PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls back to the public dev-secret-cha... | 2026-09-16 |
| CVE-2026-57133 | high | 8.8 | No | PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell() helper exported from src/praisonai-ts/src/tools/utility-tools.t... | 2026-09-16 |
| CVE-2026-57112 | high | 8.3 | No | PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 until 1.6.59 and PraisonAI 3.10.0 until 4.6.59, ToolsMCPServer.run_sse()... | 2026-09-16 |