Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-62648 | high | 7.5 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated... | 2026-09-08 |
| CVE-2026-62645 | critical | 9.8 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be us... | 2026-09-08 |
| CVE-2026-50093 | critical | 9.0 | No | A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All version... | 2026-09-08 |
| CVE-2026-20517 | medium | 6.7 | No | In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malic... | 2026-09-08 |
| CVE-2026-20511 | medium | 6.7 | No | In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malici... | 2026-09-08 |
| CVE-2026-20510 | medium | 6.7 | No | In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a... | 2026-09-08 |
| CVE-2026-81302 | high | 7.8 | No | PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code wi... | 2026-09-08 |
| CVE-2026-70403 | critical | 9.8 | No | XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). Anyone with the knowledge of the credential may log in to the affected de... | 2026-09-08 |
| CVE-2026-69657 | critical | 9.8 | No | XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected devi... | 2026-09-08 |
| CVE-2026-66840 | high | 7.5 | No | XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). Sensitive system informa... | 2026-09-08 |
| CVE-2026-62928 | critical | 9.8 | No | XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected. | 2026-09-08 |
| CVE-2026-20514 | medium | 4.4 | No | In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure... | 2026-09-08 |
| CVE-2026-20513 | medium | 4.4 | No | In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure i... | 2026-09-08 |
| CVE-2026-20512 | medium | 6.7 | No | In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege... | 2026-09-08 |
| CVE-2026-20509 | medium | 6.7 | No | In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a m... | 2026-09-08 |
| CVE-2026-20508 | medium | 6.7 | No | In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malic... | 2026-09-08 |
| CVE-2026-20507 | medium | 6.7 | No | In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malic... | 2026-09-08 |
| CVE-2026-20506 | medium | 6.7 | No | In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malic... | 2026-09-08 |
| CVE-2026-22575 | medium | 4.9 | No | An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 a... | 2026-09-08 |
| CVE-2026-85640 | medium | 6.3 | No | Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component | 2026-09-08 |