Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90442 | not reported | — | No | A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox man... | 2026-11-04 |
| CVE-2026-82033 | high | 8.4 | No | DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile... | 2026-11-04 |
| CVE-2026-77173 | medium | 4.3 | No | A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not b... | 2026-11-04 |
| CVE-2026-77171 | low | 3.5 | No | A public shared collective always allowed recipients of the link to create pages. | 2026-11-04 |
| CVE-2026-77167 | high | 7.5 | No | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist ind... | 2026-11-04 |
| CVE-2026-67400 | low | 3.5 | No | A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token. | 2026-11-04 |
| CVE-2026-82332 | not reported | — | No | An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthent... | 2026-11-04 |
| CVE-2026-19319 | medium | 5.3 | No | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-boun... | 2026-11-04 |
| CVE-2026-18142 | high | 7.1 | No | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 th... | 2026-11-04 |
| CVE-2026-17493 | high | 7.5 | No | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due to an out-of-bounds... | 2026-11-04 |
| CVE-2026-4337 | not reported | — | No | Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of... | 2026-11-04 |
| CVE-2026-41022 | medium | 5.9 | No | Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to... | 2026-11-04 |
| CVE-2026-41021 | high | 7.5 | No | Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could... | 2026-11-04 |
| CVE-2026-41020 | high | 7.5 | No | Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication... | 2026-11-04 |
| CVE-2026-16725 | medium | 6.5 | No | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local... | 2026-11-04 |
| CVE-2026-14252 | medium | 6.2 | No | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 th... | 2026-11-04 |
| CVE-2026-13289 | high | 7.1 | No | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 th... | 2026-11-04 |
| CVE-2026-13284 | high | 7.1 | No | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 th... | 2026-11-04 |
| CVE-2026-16307 | medium | 4.3 | No | Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not... | 2026-11-04 |
| CVE-2026-15586 | medium | 5.3 | No | Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute... | 2026-11-04 |