Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-78484 | high | 7.8 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali... | 2026-09-11 |
| CVE-2026-79941 | critical | 9.8 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali... | 2026-09-11 |
| CVE-2026-78492 | high | 7.4 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific... | 2026-09-11 |
| CVE-2026-42264 | critical | 9.1 | No | Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties (auth... | 2026-09-11 |
| CVE-2026-21101 | medium | 6.7 | No | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitra... | 2026-09-11 |
| CVE-2026-21096 | critical | 9.8 | No | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbi... | 2026-09-11 |
| CVE-2026-21095 | critical | 9.8 | No | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbit... | 2026-09-11 |
| CVE-2026-75644 | medium | 5.4 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker... | 2026-09-11 |
| CVE-2026-75637 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-72626 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-84939 | critical | 9.1 | No | Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale iden... | 2026-09-11 |
| CVE-2026-41870 | high | 8.8 | No | Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamically-Managed Code Resources, Us... | 2026-09-11 |
| CVE-2026-71356 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-11 |
| CVE-2026-21090 | high | 7.8 | No | Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. | 2026-09-11 |
| CVE-2026-21091 | high | 7.8 | No | Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. | 2026-09-11 |
| CVE-2026-21092 | medium | 5.3 | No | Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege. | 2026-09-11 |
| CVE-2026-21093 | medium | 6.7 | No | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memor... | 2026-09-11 |
| CVE-2026-21094 | high | 8.8 | No | Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory. | 2026-09-11 |
| CVE-2026-67277 | high | 8.2 | Listed | RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated clie... | 2026-09-11 |
| CVE-2026-86060 | critical | 9.8 | Listed | RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for t... | 2026-09-11 |