Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77089 | critical | 9.8 | No | Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenan... | 2026-09-11 |
| CVE-2026-77091 | high | 7.8 | No | DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release... | 2026-09-11 |
| CVE-2026-77092 | critical | 9.8 | No | Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved... | 2026-09-11 |
| CVE-2026-77097 | high | 8.2 | No | Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Softwar... | 2026-09-11 |
| CVE-2026-77098 | critical | 9.8 | No | Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenanc... | 2026-09-11 |
| CVE-2026-85239 | medium | 6.5 | No | A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypas... | 2026-09-11 |
| CVE-2026-83999 | high | 7.0 | No | Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an autho... | 2026-09-11 |
| CVE-2026-81789 | high | 8.6 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Studio Wombat Advanced Product Fields Extend... | 2026-09-11 |
| CVE-2026-7438 | medium | 6.4 | No | The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `supertitle` and `subtitle` attributes of t... | 2026-09-11 |
| CVE-2026-77111 | high | 8.7 | No | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high... | 2026-09-11 |
| CVE-2026-75738 | medium | 5.4 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker... | 2026-09-11 |
| CVE-2026-75733 | medium | 5.4 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker... | 2026-09-11 |
| CVE-2026-75709 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-75674 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-75668 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-75659 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-75639 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-6641 | medium | 6.4 | No | The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in versions up... | 2026-09-11 |
| CVE-2026-72627 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-72941 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-11 |