Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-26157 | high | 7.0 | No | A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives... | 2026-11-04 |
| CVE-2026-19843 | high | 8.4 | No | A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's disting... | 2026-11-04 |
| CVE-2026-19546 | high | 8.8 | No | A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Descriptio... | 2026-11-04 |
| CVE-2026-19389 | high | 7.1 | No | Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing hea... | 2026-11-04 |
| CVE-2026-19654 | high | 7.5 | No | A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversi... | 2026-11-04 |
| CVE-2026-19550 | high | 8.2 | No | A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-admi... | 2026-11-04 |
| CVE-2026-122299 | high | 8.8 | No | Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a duplicate tree header t... | 2026-11-04 |
| CVE-2026-122048 | high | 7.3 | No | A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown fun... | 2026-11-04 |
| CVE-2026-122047 | high | 7.3 | No | A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the function move_uploaded... | 2026-11-04 |
| CVE-2026-122038 | high | 7.3 | No | A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issu... | 2026-11-04 |
| CVE-2026-122028 | medium | 4.3 | No | A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknown functionality of the file /a... | 2026-11-04 |
| CVE-2026-18917 | high | 7.8 | No | A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler.... | 2026-11-04 |
| CVE-2026-119719 | high | 7.8 | No | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-... | 2026-11-04 |
| CVE-2026-119715 | medium | 4.3 | No | NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interface because no X-Frame... | 2026-11-04 |
| CVE-2026-119711 | medium | 5.3 | No | PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackers to evade per-IP thr... | 2026-11-04 |
| CVE-2026-119707 | high | 7.1 | No | SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check c... | 2026-11-04 |
| CVE-2026-119703 | medium | 4.8 | No | xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that allows remote unauth... | 2026-11-04 |
| CVE-2026-119699 | medium | 5.3 | No | WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to pers... | 2026-11-04 |
| CVE-2026-119663 | medium | 4.3 | No | Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create... | 2026-11-04 |
| CVE-2026-119659 | medium | 5.4 | No | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users' folders because... | 2026-11-04 |