Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-79575 | high | 7.5 | No | The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making th... | 2026-09-09 |
| CVE-2026-79378 | high | 7.5 | No | An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to c... | 2026-09-09 |
| CVE-2026-79377 | high | 7.5 | No | A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows at... | 2026-09-09 |
| CVE-2026-79376 | high | 8.8 | No | An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers t... | 2026-09-09 |
| CVE-2026-16876 | not reported | — | No | An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arb... | 2026-09-09 |
| CVE-2026-86145 | high | 8.2 | No | PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching works... | 2026-09-09 |
| CVE-2026-79426 | high | 7.2 | No | An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to d... | 2026-09-09 |
| CVE-2026-79423 | high | 8.8 | No | An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute arb... | 2026-09-09 |
| CVE-2026-75438 | high | 7.5 | No | Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() function | 2026-09-09 |
| CVE-2026-79391 | critical | 9.8 | No | No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requi... | 2026-09-09 |
| CVE-2026-71626 | high | 7.5 | No | An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRe... | 2026-09-09 |
| CVE-2026-71624 | critical | 9.8 | No | An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controlle... | 2026-09-09 |
| CVE-2021-44319 | high | 7.5 | No | Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-Fi deauthentication a... | 2026-09-09 |
| CVE-2026-78745 | critical | 9.8 | No | An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via the Android Debug Br... | 2026-09-09 |
| CVE-2026-75169 | high | 8.8 | No | An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenti... | 2026-09-09 |
| CVE-2026-75165 | medium | 6.5 | No | An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privilege... | 2026-09-09 |
| CVE-2026-75161 | high | 8.8 | No | An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated u... | 2026-09-09 |
| CVE-2026-85505 | high | 7.5 | No | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujit... | 2026-09-09 |
| CVE-2026-17469 | medium | 5.5 | No | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD q... | 2026-09-09 |
| CVE-2026-77104 | high | 7.5 | No | CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Upd... | 2026-09-09 |