Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82159 | high | 8.8 | No | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-s... | 2026-11-03 |
| CVE-2026-76894 | low | 3.1 | No | CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.... | 2026-11-03 |
| CVE-2026-77777 | high | 7.1 | No | ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modi... | 2026-11-03 |
| CVE-2026-76654 | medium | 5.8 | No | An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that poin... | 2026-11-03 |
| CVE-2026-64672 | not reported | — | No | Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, th... | 2026-11-03 |
| CVE-2026-61496 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-03 |
| CVE-2026-58988 | medium | 4.0 | No | In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information... | 2026-11-03 |
| CVE-2026-58985 | medium | 6.2 | No | In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to... | 2026-11-03 |
| CVE-2026-58955 | medium | 6.2 | No | In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This coul... | 2026-11-03 |
| CVE-2026-58937 | medium | 6.2 | No | In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of... | 2026-11-03 |
| CVE-2026-58933 | medium | 5.3 | No | In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote informati... | 2026-11-03 |
| CVE-2026-58915 | medium | 6.1 | No | A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notific... | 2026-11-03 |
| CVE-2026-58877 | medium | 4.0 | No | In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead... | 2026-11-03 |
| CVE-2026-58875 | medium | 6.2 | No | In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service wi... | 2026-11-03 |
| CVE-2026-58821 | medium | 6.2 | No | In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could l... | 2026-11-03 |
| CVE-2026-58817 | medium | 6.2 | No | In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation.... | 2026-11-03 |
| CVE-2026-55272 | medium | 6.2 | No | In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local... | 2026-11-03 |
| CVE-2026-28531 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-03 |
| CVE-2026-55264 | medium | 4.0 | No | In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead... | 2026-11-03 |
| CVE-2026-49935 | medium | 4.0 | No | In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could... | 2026-11-03 |