Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-99218 | high | 7.0 | No | In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads coredump_finish() re... | 2026-11-03 |
| CVE-2026-99217 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-03 |
| CVE-2026-8913 | not reported | — | No | A command Injection vulnerability exists in the WireGuard client configuration of Archer MR600 v2, v3, and v5 due to improper neutralization... | 2026-11-03 |
| CVE-2026-90724 | low | 2.7 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-11-03 |
| CVE-2026-89111 | critical | 10.0 | No | The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the ten... | 2026-11-03 |
| CVE-2026-63502 | high | 8.3 | No | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI de... | 2026-11-03 |
| CVE-2026-86401 | low | 2.7 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-11-03 |
| CVE-2026-63489 | high | 7.6 | No | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. In version 2.5.0 and ea... | 2026-11-03 |
| CVE-2026-63499 | not reported | — | No | zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.1, ZipUtil.unpack(...) can apply stor... | 2026-11-03 |
| CVE-2026-55409 | high | 7.6 | No | Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.53, a disabled RichEditor field... | 2026-11-03 |
| CVE-2026-63198 | high | 7.3 | No | traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, OAuth2 silent authorization requests using prompt=non... | 2026-11-03 |
| CVE-2026-4052 | critical | 9.8 | No | This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such enviro... | 2026-11-03 |
| CVE-2026-45146 | high | 7.2 | No | Chamilo LMS is an open-source learning management system. Prior to 1.11.40 and 2.0.1, an authenticated administrator can call the get_sessio... | 2026-11-03 |
| CVE-2026-121382 | high | 7.5 | No | A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. Affected by this issue is the function msg_aes_dec of the file /usr/bi... | 2026-11-03 |
| CVE-2026-44266 | critical | 9.8 | No | Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-... | 2026-11-03 |
| CVE-2026-16900 | high | 7.5 | No | Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector re... | 2026-11-03 |
| CVE-2026-120956 | high | 7.1 | No | The MongoDB C Driver does not validate the type or format of a namespace field returned by the server in a query response. A MongoDB endpoin... | 2026-11-03 |
| CVE-2026-120955 | high | 7.5 | No | The GridFS file download API in the MongoDB C Driver does not check the result of an internal operation under certain error conditions durin... | 2026-11-03 |
| CVE-2026-120954 | low | 3.7 | No | A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when computing the number... | 2026-11-03 |
| CVE-2026-120953 | medium | 4.3 | No | A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the drive... | 2026-11-03 |