Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-72633 | medium | 4.3 | No | Incorrect Authorization (CWE-863) in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing Functionality Not Prope... | 2026-09-04 |
| CVE-2025-15379 | critical | 10.0 | No | A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_depend... | 2026-09-04 |
| CVE-2026-47837 | critical | 9.8 | No | Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Serv... | 2026-09-04 |
| CVE-2026-85401 | medium | 6.3 | No | A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdo... | 2026-09-04 |
| CVE-2026-85382 | medium | 4.3 | No | A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Impacted is... | 2026-09-04 |
| CVE-2026-85241 | medium | 6.3 | No | A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of the file cmd/api/src/a... | 2026-09-04 |
| CVE-2026-85208 | high | 7.3 | No | A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of th... | 2026-09-04 |
| CVE-2026-32480 | medium | 5.3 | No | Missing Authorization vulnerability in WC Lovers WCFM Membership allows Exploiting Incorrectly Configured Access Control Security Levels. T... | 2026-09-04 |
| CVE-2026-27432 | medium | 5.4 | No | Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorrectly Configured Acce... | 2026-09-04 |
| CVE-2026-27347 | medium | 5.3 | No | Missing Authorization vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels. This is... | 2026-09-04 |
| CVE-2026-85514 | medium | 6.3 | No | A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controll... | 2026-09-04 |
| CVE-2026-85224 | critical | 9.1 | No | A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file_sharing.cgi of the... | 2026-09-04 |
| CVE-2026-80911 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() If... | 2026-09-04 |
| CVE-2026-80910 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA... | 2026-09-04 |
| CVE-2026-80903 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix sync entry leak on OA config emit failure xe_oa_emit_oa... | 2026-09-04 |
| CVE-2026-80902 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA Wh... | 2026-09-04 |
| CVE-2026-80900 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Make UMP message size check more robust If message offset... | 2026-09-04 |
| CVE-2026-80898 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: netfs: clear PG_private_2 on copy-to-cache append failure netfs_pgpriv... | 2026-09-04 |
| CVE-2026-80896 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in mshv_irqfd_deassign mshv_irqfd_deactivate() and the... | 2026-09-04 |
| CVE-2026-80895 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mshv: Order pt_vp_array publish against irqfd assertion path mshv_part... | 2026-09-04 |