Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-79641 | high | 7.5 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali... | 2026-09-11 |
| CVE-2026-78494 | high | 7.4 | No | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific... | 2026-09-11 |
| CVE-2026-73787 | high | 7.2 | No | A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable syste... | 2026-09-11 |
| CVE-2026-73769 | high | 7.2 | No | A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve rem... | 2026-09-11 |
| CVE-2026-23855 | high | 7.2 | No | Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, co... | 2026-09-11 |
| CVE-2026-21104 | medium | 6.7 | No | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code... | 2026-09-11 |
| CVE-2026-21102 | medium | 6.7 | No | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege. | 2026-09-11 |
| CVE-2026-21087 | high | 7.8 | No | Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privi... | 2026-09-11 |
| CVE-2026-21085 | medium | 6.7 | No | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. | 2026-09-11 |
| CVE-2026-19584 | high | 7.7 | No | Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup,... | 2026-09-11 |
| CVE-2026-19583 | critical | 9.9 | No | Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arb... | 2026-09-11 |
| CVE-2026-0307 | not reported | — | No | Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privi... | 2026-09-11 |
| CVE-2026-0304 | not reported | — | No | A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the... | 2026-09-11 |
| CVE-2026-19820 | not reported | — | No | A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Wi... | 2026-09-11 |
| CVE-2026-9138 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated attacker to write arbitrary files to the server due to improper... | 2026-09-10 |
| CVE-2026-9036 | medium | 5.9 | No | IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allo... | 2026-09-10 |
| CVE-2026-85310 | medium | 6.5 | No | import_contacts Path Traversal in Groundhogg <= 4.7.1 versions. | 2026-09-10 |
| CVE-2026-83976 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-10 |
| CVE-2026-81804 | high | 7.5 | No | Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration <= 2.4.2 versions. | 2026-09-10 |
| CVE-2026-83955 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-10 |