Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-78221 | not reported | — | No | An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users... | 2026-09-08 |
| CVE-2026-78043 | not reported | — | No | The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration dir... | 2026-09-08 |
| CVE-2025-67038 | critical | 9.8 | Listed | An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authenticatio... | 2026-09-08 |
| CVE-2026-62654 | medium | 6.8 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key... | 2026-09-08 |
| CVE-2026-62650 | high | 8.8 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management in... | 2026-09-08 |
| CVE-2026-62648 | high | 7.5 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated... | 2026-09-08 |
| CVE-2026-62645 | critical | 9.8 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be us... | 2026-09-08 |
| CVE-2026-50093 | critical | 9.0 | No | A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All version... | 2026-09-08 |
| CVE-2026-20517 | medium | 6.7 | No | In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malic... | 2026-09-08 |
| CVE-2026-20511 | medium | 6.7 | No | In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malici... | 2026-09-08 |
| CVE-2026-20510 | medium | 6.7 | No | In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a... | 2026-09-08 |
| CVE-2026-81302 | high | 7.8 | No | PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code wi... | 2026-09-08 |
| CVE-2026-70403 | critical | 9.8 | No | XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected de... | 2026-09-08 |
| CVE-2026-69657 | critical | 9.8 | No | XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected devi... | 2026-09-08 |
| CVE-2026-66840 | high | 7.5 | No | XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system informa... | 2026-09-08 |
| CVE-2026-62928 | critical | 9.8 | No | XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected. | 2026-09-08 |
| CVE-2026-20514 | medium | 4.4 | No | In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure... | 2026-09-08 |
| CVE-2026-20513 | medium | 4.4 | No | In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure i... | 2026-09-08 |
| CVE-2026-20512 | medium | 6.7 | No | In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege... | 2026-09-08 |
| CVE-2026-20509 | medium | 6.7 | No | In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a m... | 2026-09-08 |