Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-78604 | high | 7.8 | No | Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries... | 2026-09-04 |
| CVE-2026-78609 | medium | 5.4 | No | Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via Metadata Spoofing (... | 2026-09-04 |
| CVE-2026-56855 | high | 7.5 | No | Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. No... | 2026-09-04 |
| CVE-2026-78662 | high | 7.5 | No | Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's... | 2026-09-04 |
| CVE-2026-85512 | high | 7.3 | No | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the... | 2026-09-04 |
| CVE-2026-85187 | high | 7.3 | No | A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order... | 2026-09-04 |
| CVE-2026-80820 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: xfs: don't livelock in scrub on a circular unlinked list LOLLM points... | 2026-09-04 |
| CVE-2026-80784 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcp_pm_de... | 2026-09-04 |
| CVE-2026-80776 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: futex: Fix race in futex_pivot_pending() during private hash resize A... | 2026-09-04 |
| CVE-2026-84394 | high | 7.5 | No | fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that starts with an op... | 2026-09-04 |
| CVE-2026-85403 | high | 7.3 | No | A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php.... | 2026-09-04 |
| CVE-2026-85397 | high | 7.3 | No | A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.p... | 2026-09-04 |
| CVE-2026-85379 | high | 7.3 | No | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This... | 2026-09-04 |
| CVE-2026-85223 | critical | 9.9 | No | A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi... | 2026-09-04 |
| CVE-2026-73764 | high | 7.1 | No | Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor... | 2026-09-04 |
| CVE-2026-73762 | medium | 6.6 | No | A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In... | 2026-09-04 |
| CVE-2026-73761 | medium | 6.5 | No | An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated information discl... | 2026-09-04 |
| CVE-2026-73760 | medium | 6.5 | No | An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arb... | 2026-09-04 |
| CVE-2026-73758 | medium | 6.5 | No | A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privileg... | 2026-09-04 |
| CVE-2026-73757 | medium | 6.4 | No | A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side reques... | 2026-09-04 |