Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81623 | high | 8.8 | No | IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due... | 2026-11-03 |
| CVE-2026-81049 | medium | 6.7 | No | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with... | 2026-11-03 |
| CVE-2026-79986 | critical | 9.1 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This is... | 2026-11-03 |
| CVE-2026-79633 | high | 8.1 | No | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users... | 2026-11-03 |
| CVE-2026-79624 | critical | 9.8 | No | Insufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Insufficient session inva... | 2026-11-03 |
| CVE-2026-79620 | medium | 4.3 | No | Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An... | 2026-11-03 |
| CVE-2026-79613 | medium | 5.3 | No | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associate... | 2026-11-03 |
| CVE-2026-74985 | critical | 9.8 | No | Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154,... | 2026-11-03 |
| CVE-2026-76994 | high | 7.5 | No | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2.... | 2026-11-03 |
| CVE-2026-75034 | high | 7.4 | No | A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed asserti... | 2026-11-03 |
| CVE-2026-73755 | medium | 5.7 | No | A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privileg... | 2026-11-03 |
| CVE-2026-70805 | high | 8.1 | No | Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite (component: Change Management). Supported versio... | 2026-11-03 |
| CVE-2026-71312 | high | 8.0 | No | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone inter... | 2026-11-03 |
| CVE-2026-70611 | medium | 6.9 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and... | 2026-11-03 |
| CVE-2026-70603 | medium | 6.0 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and... | 2026-11-03 |
| CVE-2026-70482 | high | 8.8 | No | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHA... | 2026-11-03 |
| CVE-2026-70075 | medium | 4.4 | No | Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to by... | 2026-11-03 |
| CVE-2026-65643 | high | 8.8 | No | Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root. | 2026-11-03 |
| CVE-2026-63500 | high | 7.1 | No | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/sc... | 2026-11-03 |
| CVE-2026-63482 | high | 7.5 | No | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI re... | 2026-11-03 |