Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-69764 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-09 |
| CVE-2025-14733 | critical | 9.8 | Listed | An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbit... | 2026-09-09 |
| CVE-2026-20504 | medium | 5.3 | No | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected... | 2026-09-09 |
| CVE-2026-20503 | medium | 5.3 | No | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected... | 2026-09-09 |
| CVE-2026-20502 | high | 8.4 | No | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no add... | 2026-09-09 |
| CVE-2026-20501 | high | 8.4 | No | In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no add... | 2026-09-09 |
| CVE-2026-18743 | low | 2.5 | No | A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when lo... | 2026-09-08 |
| CVE-2026-19299 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to path traversal. | 2026-09-08 |
| CVE-2026-8376 | critical | 9.8 | No | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regula... | 2026-09-08 |
| CVE-2026-19300 | high | 7.5 | No | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive... | 2026-09-08 |
| CVE-2026-19301 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request... | 2026-09-08 |
| CVE-2026-19302 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation... | 2026-09-08 |
| CVE-2026-19305 | high | 7.5 | No | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. | 2026-09-08 |
| CVE-2026-19306 | high | 7.7 | No | IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server filesystem — including server... | 2026-09-08 |
| CVE-2026-81832 | high | 7.7 | No | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1... | 2026-09-08 |
| CVE-2026-8447 | medium | 6.1 | No | IBM Langflow OSS 1.0.0 through 1.11.2 suffer from a stored cross-site scripting vulnerability in the Playground chat interface. | 2026-09-08 |
| CVE-2026-9186 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass localhost-only MCP configuration installation by spoof... | 2026-09-08 |
| CVE-2026-18567 | medium | 4.7 | No | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Un... | 2026-09-08 |
| CVE-2026-18858 | medium | 5.5 | No | IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH. | 2026-09-08 |
| CVE-2026-18887 | medium | 6.5 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to obtain sensitive information in PASE. An attacker could exploit this v... | 2026-09-08 |