Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-80730 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERR_PTR to kthread_stop() In test_ringb... | 2026-09-03 |
| CVE-2026-80727 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the foll... | 2026-09-03 |
| CVE-2026-78689 | high | 8.1 | No | Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiv... | 2026-09-03 |
| CVE-2026-77180 | high | 8.3 | No | When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NG... | 2026-09-03 |
| CVE-2026-66842 | high | 8.8 | No | BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed... | 2026-09-03 |
| CVE-2026-66362 | high | 8.1 | No | Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX config... | 2026-09-03 |
| CVE-2026-20212 | critical | 9.8 | No | A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execu... | 2026-09-03 |
| CVE-2026-15926 | not reported | — | No | Rejected reason: Red Hat Product Security has determined that this CVE ID is not needed | 2026-09-03 |
| CVE-2026-84126 | medium | 4.3 | No | Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. | 2026-09-03 |
| CVE-2026-84127 | medium | 4.3 | No | Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155. | 2026-09-03 |
| CVE-2026-84128 | high | 8.8 | No | Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. | 2026-09-03 |
| CVE-2026-84129 | critical | 9.8 | No | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and... | 2026-09-03 |
| CVE-2026-84131 | high | 8.8 | No | Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Fire... | 2026-09-03 |
| CVE-2026-84145 | high | 7.5 | No | Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of me... | 2026-09-03 |
| CVE-2023-7299 | critical | 9.8 | No | A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dat... | 2026-09-03 |
| CVE-2023-7249 | critical | 9.8 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows... | 2026-09-03 |
| CVE-2026-20355 | medium | 5.9 | No | Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could a... | 2026-09-02 |
| CVE-2026-20354 | medium | 5.9 | No | Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could a... | 2026-09-02 |
| CVE-2026-20281 | high | 7.5 | No | A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Sess... | 2026-09-02 |
| CVE-2026-78222 | high | 7.5 | No | A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch() can crash an NGINX worker when trusted Ja... | 2026-09-02 |