Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-52833 | high | 8.0 | No | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runtime generates a buil... | 2026-09-09 |
| CVE-2026-52832 | medium | 4.9 | No | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/fun... | 2026-09-09 |
| CVE-2026-52831 | high | 8.0 | No | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl in... | 2026-09-09 |
| CVE-2026-45730 | high | 8.3 | No | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Das... | 2026-09-09 |
| CVE-2026-56128 | medium | 5.4 | No | pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary Jav... | 2026-09-09 |
| CVE-2026-56127 | medium | 5.4 | No | pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScr... | 2026-09-09 |
| CVE-2026-56126 | medium | 5.4 | No | pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript... | 2026-09-09 |
| CVE-2026-85091 | high | 7.4 | No | zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gz... | 2026-09-09 |
| CVE-2026-87463 | medium | 4.8 | No | Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof... | 2026-09-09 |
| CVE-2026-87456 | low | 3.4 | No | Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process t... | 2026-09-09 |
| CVE-2026-87458 | medium | 5.4 | No | UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI... | 2026-09-09 |
| CVE-2026-87461 | medium | 4.3 | No | Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome ex... | 2026-09-09 |
| CVE-2026-87462 | medium | 5.4 | No | UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI el... | 2026-09-09 |
| CVE-2026-87465 | medium | 4.2 | No | Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proc... | 2026-09-09 |
| CVE-2026-87466 | medium | 4.3 | No | Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a craft... | 2026-09-09 |
| CVE-2026-87434 | low | 3.1 | No | Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to... | 2026-09-09 |
| CVE-2026-87449 | medium | 4.3 | No | Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web... | 2026-09-09 |
| CVE-2026-87432 | medium | 4.2 | No | Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer pro... | 2026-09-09 |
| CVE-2026-87653 | medium | 5.4 | No | UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via... | 2026-09-09 |
| CVE-2026-87647 | low | 3.4 | No | Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to... | 2026-09-09 |