Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82390 | low | 3.7 | No | The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session cipher API — it hands out up to CONFIG_ESP32_CRYPTO_AE... | 2026-11-04 |
| CVE-2026-81039 | medium | 4.3 | No | The Bluetooth host pre-allocates a bt_conn object (a "reservation") from the fixed acl_conns[] pool for every connectable advertising set it... | 2026-11-04 |
| CVE-2026-81038 | high | 7.1 | No | The Object Transfer Service server builds its Object Action Control Point (OACP) response indication in oacp_ind_send() (subsys/bluetooth/se... | 2026-11-04 |
| CVE-2026-79982 | high | 8.8 | No | The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every controller-to-host HC... | 2026-11-04 |
| CVE-2026-77800 | high | 7.7 | No | ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML... | 2026-11-04 |
| CVE-2026-79978 | low | 3.6 | No | The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl345/adxl345_stream.c clamps the amount of... | 2026-11-04 |
| CVE-2026-79977 | high | 8.2 | No | The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authenticate. In handle_tra... | 2026-11-04 |
| CVE-2026-79976 | high | 7.1 | No | The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file, where the bus contro... | 2026-11-04 |
| CVE-2026-78117 | medium | 4.2 | No | The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet descriptor in a file... | 2026-11-04 |
| CVE-2026-78116 | medium | 5.2 | No | The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In data_ready_work... | 2026-11-04 |
| CVE-2026-77691 | high | 8.1 | No | ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft... | 2026-11-04 |
| CVE-2026-77684 | medium | 5.7 | No | The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are... | 2026-11-04 |
| CVE-2026-76788 | high | 8.8 | No | The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a s... | 2026-11-04 |
| CVE-2026-76787 | medium | 5.9 | No | The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe() (subsys/mgm... | 2026-11-04 |
| CVE-2026-75085 | medium | 4.2 | No | The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet length of a received frame as pkt_len = rx... | 2026-11-04 |
| CVE-2026-75084 | medium | 6.8 | No | The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio's RX FIFO in get_packet_length() and va... | 2026-11-04 |
| CVE-2026-75083 | medium | 5.9 | No | The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pk... | 2026-11-04 |
| CVE-2026-67693 | low | 3.7 | No | GnuTLS v3.8.13 does not reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usa... | 2026-11-04 |
| CVE-2026-58995 | high | 8.4 | No | In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escala... | 2026-11-04 |
| CVE-2026-58994 | high | 8.4 | No | In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local... | 2026-11-04 |