Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112652 | medium | 5.5 | No | A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, m... | 2026-11-04 |
| CVE-2026-112467 | low | 3.3 | No | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypa... | 2026-11-04 |
| CVE-2026-107479 | not reported | — | No | An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framewo... | 2026-11-04 |
| CVE-2026-112421 | medium | 4.7 | No | A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2... | 2026-11-04 |
| CVE-2026-102713 | not reported | — | No | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with packet chaining, the TFTP server does not bound the length... | 2026-11-04 |
| CVE-2026-119977 | high | 8.1 | Listed | WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging path... | 2026-11-04 |
| CVE-2026-121565 | high | 7.4 | No | Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several inter... | 2026-11-04 |
| CVE-2026-119551 | medium | 6.5 | No | Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsController.GetSuggestions that allows authenticated non-a... | 2026-11-04 |
| CVE-2026-102712 | not reported | — | No | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with DTLS server support, the NetX Secure DTLS server's ClientH... | 2026-11-04 |
| CVE-2026-12859 | medium | 6.5 | No | Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly... | 2026-11-04 |
| CVE-2026-102728 | high | 7.5 | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure TLS client's ServerHello parser and DTLS client's HelloVerif... | 2026-11-04 |
| CVE-2026-102727 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP server accepts the first connection to a passive data port without c... | 2026-11-04 |
| CVE-2026-102726 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the PPP IPCP code parses a peer's Configure-Nak without validating each opti... | 2026-11-04 |
| CVE-2026-102725 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, the MSRP parser uses the attribute list l... | 2026-11-04 |
| CVE-2026-102724 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, evicting the last attribute in an MRP par... | 2026-11-04 |
| CVE-2026-102723 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, the MSRP attribute lookup writes through... | 2026-11-04 |
| CVE-2026-95649 | not reported | — | No | IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or... | 2026-11-04 |
| CVE-2026-94460 | not reported | — | No | IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predi... | 2026-11-04 |
| CVE-2026-94459 | not reported | — | No | IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installatio... | 2026-11-04 |
| CVE-2026-102722 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP client in IPv4 passive mode opens its data connection to whatever ad... | 2026-11-04 |