Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-80894 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on repla... | 2026-09-04 |
| CVE-2026-80891 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The... | 2026-09-04 |
| CVE-2026-80889 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and tx_gen ordering... | 2026-09-04 |
| CVE-2026-85398 | high | 7.3 | No | A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. S... | 2026-09-04 |
| CVE-2026-85380 | high | 7.3 | No | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vuln... | 2026-09-04 |
| CVE-2026-80886 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: serial: msm: Disable DMA for kernel console UART At the moment, concur... | 2026-09-04 |
| CVE-2026-80885 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc OOB message handler Fix AFS to cancel its O... | 2026-09-04 |
| CVE-2026-84832 | not reported | — | No | SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow without adequate vali... | 2026-09-04 |
| CVE-2026-80882 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for cc... | 2026-09-04 |
| CVE-2026-80881 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head management in ocfs2_read_blocks() In ocfs2_read... | 2026-09-04 |
| CVE-2026-80879 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write A cir... | 2026-09-04 |
| CVE-2026-80877 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: afs: Fix vllist leak Fix a leak of the new vllist in afs_update_cell()... | 2026-09-04 |
| CVE-2026-80874 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide: Describe inline ECC carveouts The DBSC5... | 2026-09-04 |
| CVE-2026-80873 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions kv... | 2026-09-04 |
| CVE-2026-80872 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/tas2781: Cancel async firmware request at unbind TAS2781 HDA... | 2026-09-04 |
| CVE-2026-80871 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove crypto_rng interface Implementing the cry... | 2026-09-04 |
| CVE-2026-80870 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Validate CRIU-restored IDs before idr_alloc The KFD CRIU r... | 2026-09-04 |
| CVE-2026-80869 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfs_read_inode_mount() The $M... | 2026-09-04 |
| CVE-2026-80868 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ntfs3: Allocate iomap inline_data using alloc_page This fixes a BUG re... | 2026-09-04 |
| CVE-2026-57777 | high | 7.6 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooCommerce allows Blind SQ... | 2026-09-04 |