Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-79574 | critical | 9.8 | No | An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message. | 2026-09-09 |
| CVE-2026-79571 | critical | 9.1 | No | Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all... | 2026-09-09 |
| CVE-2026-79390 | high | 7.5 | No | Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1... | 2026-09-09 |
| CVE-2026-78997 | critical | 9.3 | No | UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows... | 2026-09-09 |
| CVE-2026-78837 | high | 7.5 | No | A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database informati... | 2026-09-09 |
| CVE-2026-69690 | medium | 5.4 | No | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized att... | 2026-09-09 |
| CVE-2026-52486 | medium | 6.6 | No | An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module | 2026-09-09 |
| CVE-2022-26961 | medium | 5.4 | No | Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and NP_IBCF-MIBER-03/NMS... | 2026-09-09 |
| CVE-2026-87485 | low | 3.1 | No | Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process t... | 2026-09-09 |
| CVE-2026-87495 | medium | 4.3 | No | Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to lea... | 2026-09-09 |
| CVE-2026-87498 | low | 3.1 | No | Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to... | 2026-09-09 |
| CVE-2026-87508 | medium | 4.3 | No | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafte... | 2026-09-09 |
| CVE-2026-87516 | medium | 4.3 | No | Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a craft... | 2026-09-09 |
| CVE-2026-87517 | low | 3.1 | No | Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass... | 2026-09-09 |
| CVE-2026-87531 | low | 3.1 | No | Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtai... | 2026-09-09 |
| CVE-2026-87573 | medium | 4.3 | No | Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a cra... | 2026-09-09 |
| CVE-2026-87574 | medium | 4.3 | No | Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafte... | 2026-09-09 |
| CVE-2026-85089 | medium | 6.5 | No | FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. T... | 2026-09-09 |
| CVE-2026-87642 | medium | 4.3 | No | Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HT... | 2026-09-09 |
| CVE-2026-87652 | low | 3.1 | No | Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proces... | 2026-09-09 |