Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-16529 | high | 7.5 | No | A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negoti... | 2026-11-04 |
| CVE-2026-16526 | high | 8.8 | No | A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to... | 2026-11-04 |
| CVE-2026-16527 | high | 7.3 | No | An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows th... | 2026-11-04 |
| CVE-2026-18147 | high | 8.1 | No | A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/... | 2026-11-04 |
| CVE-2026-16524 | high | 7.8 | No | A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This fai... | 2026-11-04 |
| CVE-2026-16493 | high | 7.8 | No | A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git... | 2026-11-04 |
| CVE-2026-16445 | high | 7.5 | No | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP opt... | 2026-11-04 |
| CVE-2026-16460 | high | 7.4 | No | A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against... | 2026-11-04 |
| CVE-2026-15722 | high | 7.5 | No | A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copie... | 2026-11-04 |
| CVE-2026-14544 | critical | 9.8 | No | A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a rem... | 2026-11-04 |
| CVE-2026-16313 | high | 7.6 | No | A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitiz... | 2026-11-04 |
| CVE-2026-13732 | high | 7.0 | No | A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal... | 2026-11-04 |
| CVE-2026-13601 | medium | 6.5 | No | A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak... | 2026-11-04 |
| CVE-2026-13097 | high | 8.7 | No | A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds dir... | 2026-11-04 |
| CVE-2026-14474 | high | 8.8 | No | A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire... | 2026-11-04 |
| CVE-2026-12564 | critical | 9.6 | No | A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashiv... | 2026-11-04 |
| CVE-2026-12912 | high | 7.3 | No | A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF im... | 2026-11-04 |
| CVE-2026-122020 | medium | 4.3 | No | A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAllBrowsers of the fil... | 2026-11-04 |
| CVE-2026-122019 | high | 7.3 | No | A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-acco... | 2026-11-04 |
| CVE-2026-12505 | high | 7.8 | No | A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user in... | 2026-11-04 |