Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-64761 | high | 7.5 | No | A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to... | 2026-09-16 |
| CVE-2026-64790 | high | 7.8 | No | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 2... | 2026-09-16 |
| CVE-2026-65380 | medium | 5.5 | No | An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden G... | 2026-09-16 |
| CVE-2026-90876 | high | 7.3 | No | A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functiona... | 2026-09-16 |
| CVE-2026-90854 | high | 7.3 | No | A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown funct... | 2026-09-16 |
| CVE-2026-90843 | high | 8.3 | No | A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. This affects the functio... | 2026-09-16 |
| CVE-2026-90831 | medium | 5.3 | No | A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c... | 2026-09-16 |
| CVE-2026-90826 | low | 2.8 | No | A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegraph/base_scenegraph.c... | 2026-09-16 |
| CVE-2026-90818 | medium | 4.3 | No | A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConf... | 2026-09-16 |
| CVE-2026-90812 | medium | 4.3 | No | A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the... | 2026-09-16 |
| CVE-2026-90807 | medium | 6.3 | No | A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forwardAttachedFiles of the file src/modules/ag... | 2026-09-16 |
| CVE-2026-54247 | medium | 4.3 | No | Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.22, Handler in dataclients/kubernetes/admission/admission... | 2026-09-16 |
| CVE-2026-4130 | high | 7.1 | No | There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local... | 2026-09-16 |
| CVE-2026-4129 | high | 8.1 | No | There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access ho... | 2026-09-16 |
| CVE-2026-48737 | medium | 4.9 | No | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, is_global_address in src/pyload/core/utils/web... | 2026-09-16 |
| CVE-2026-20079 | critical | 10.0 | Listed | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attack... | 2026-09-16 |
| CVE-2026-84537 | medium | 6.6 | No | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An... | 2026-09-16 |
| CVE-2026-84520 | critical | 9.8 | No | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to... | 2026-09-16 |
| CVE-2026-84554 | medium | 5.9 | No | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tah... | 2026-09-16 |
| CVE-2026-86890 | medium | 4.6 | No | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with ph... | 2026-09-16 |