Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112424 | high | 7.1 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macO... | 2026-11-03 |
| CVE-2026-112428 | medium | 5.5 | No | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A... | 2026-11-03 |
| CVE-2026-112429 | medium | 5.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macO... | 2026-11-03 |
| CVE-2026-112432 | medium | 6.2 | No | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27... | 2026-11-03 |
| CVE-2026-95860 | critical | 9.1 | No | node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access control configured thro... | 2026-11-03 |
| CVE-2026-95730 | medium | 6.5 | No | A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user to cause a denial o... | 2026-11-03 |
| CVE-2026-95729 | medium | 6.5 | No | A sensitive information disclosure vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated attacker... | 2026-11-03 |
| CVE-2026-95727 | high | 7.2 | No | A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to... | 2026-11-03 |
| CVE-2026-89293 | not reported | — | No | In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions th... | 2026-11-03 |
| CVE-2026-89292 | not reported | — | No | In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNE... | 2026-11-03 |
| CVE-2026-88781 | not reported | — | No | Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory add... | 2026-11-03 |
| CVE-2026-84627 | high | 7.8 | No | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, ma... | 2026-11-03 |
| CVE-2026-82159 | high | 8.8 | No | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-s... | 2026-11-03 |
| CVE-2026-76894 | low | 3.1 | No | CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.... | 2026-11-03 |
| CVE-2026-77777 | high | 7.1 | No | ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modi... | 2026-11-03 |
| CVE-2026-76654 | medium | 5.8 | No | An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that poin... | 2026-11-03 |
| CVE-2026-64672 | not reported | — | No | Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, th... | 2026-11-03 |
| CVE-2026-61496 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-03 |
| CVE-2026-59007 | medium | 5.3 | No | In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to rem... | 2026-11-03 |
| CVE-2026-59006 | medium | 4.0 | No | In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to lo... | 2026-11-03 |