Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-93568 | high | 7.5 | No | A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT... | 2026-11-04 |
| CVE-2026-93567 | high | 7.5 | No | A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header... | 2026-11-04 |
| CVE-2026-93492 | medium | 5.3 | No | A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAX_... | 2026-11-04 |
| CVE-2026-91901 | low | 3.5 | No | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulner... | 2026-11-04 |
| CVE-2026-91903 | medium | 6.1 | No | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversa... | 2026-11-04 |
| CVE-2026-89058 | high | 7.4 | No | A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in t... | 2026-11-04 |
| CVE-2026-86388 | medium | 5.3 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-11-04 |
| CVE-2026-86577 | critical | 9.4 | No | Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP... | 2026-11-04 |
| CVE-2026-86576 | critical | 9.4 | No | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50... | 2026-11-04 |
| CVE-2026-86575 | critical | 9.4 | No | Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-5... | 2026-11-04 |
| CVE-2026-86574 | critical | 9.8 | No | Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54. | 2026-11-04 |
| CVE-2026-86365 | medium | 4.2 | No | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability. A low privileged atta... | 2026-11-04 |
| CVE-2026-85299 | not reported | — | No | A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prio... | 2026-11-04 |
| CVE-2026-84495 | high | 7.8 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPad... | 2026-11-04 |
| CVE-2026-84494 | high | 7.1 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate... | 2026-11-04 |
| CVE-2026-82161 | medium | 6.8 | No | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-s... | 2026-11-04 |
| CVE-2026-82122 | critical | 9.4 | No | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Ve... | 2026-11-04 |
| CVE-2026-82121 | high | 7.5 | No | Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Versio... | 2026-11-04 |
| CVE-2026-82120 | critical | 9.8 | No | Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Ver... | 2026-11-04 |
| CVE-2026-82119 | critical | 9.8 | No | OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9... | 2026-11-04 |