Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92377 | high | 7.8 | No | Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allow... | 2026-11-04 |
| CVE-2026-92376 | high | 7.8 | No | Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to v... | 2026-11-04 |
| CVE-2026-92375 | high | 7.8 | No | An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remo... | 2026-11-04 |
| CVE-2026-92546 | high | 7.5 | No | Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass.... | 2026-11-04 |
| CVE-2026-82418 | critical | 9.8 | No | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vul... | 2026-11-04 |
| CVE-2026-88812 | high | 7.8 | No | A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a c... | 2026-11-04 |
| CVE-2026-87085 | medium | 6.3 | No | Tanium addressed a SQL injection vulnerability in Provision. | 2026-11-04 |
| CVE-2026-82984 | medium | 4.3 | No | When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member o... | 2026-11-04 |
| CVE-2026-92374 | high | 7.8 | No | A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Ful... | 2026-11-04 |
| CVE-2026-92372 | high | 8.8 | No | An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows... | 2026-11-04 |
| CVE-2026-90464 | not reported | — | No | An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attack... | 2026-11-04 |
| CVE-2026-90442 | not reported | — | No | A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox man... | 2026-11-04 |
| CVE-2026-82033 | high | 8.4 | No | DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile... | 2026-11-04 |
| CVE-2026-77173 | medium | 4.3 | No | A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not b... | 2026-11-04 |
| CVE-2026-77171 | low | 3.5 | No | A public shared collective always allowed recipients of the link to create pages. | 2026-11-04 |
| CVE-2026-77167 | high | 7.5 | No | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist ind... | 2026-11-04 |
| CVE-2026-67400 | low | 3.5 | No | A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token. | 2026-11-04 |
| CVE-2026-82332 | not reported | — | No | An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthent... | 2026-11-04 |
| CVE-2026-19319 | medium | 5.3 | No | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-boun... | 2026-11-04 |
| CVE-2026-18142 | high | 7.1 | No | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 th... | 2026-11-04 |