Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86955 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to acce... | 2026-11-03 |
| CVE-2026-119561 | high | 8.1 | No | phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse() that never ver... | 2026-11-03 |
| CVE-2025-12767 | medium | 5.3 | No | IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that... | 2026-11-03 |
| CVE-2025-36084 | high | 7.5 | No | IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive... | 2026-11-03 |
| CVE-2026-15915 | medium | 5.5 | No | IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context direc... | 2026-11-03 |
| CVE-2026-16426 | medium | 5.4 | No | IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauth... | 2026-11-03 |
| CVE-2026-119721 | medium | 6.1 | No | Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in readfile.cc that read... | 2026-11-03 |
| CVE-2026-17465 | medium | 6.5 | No | IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper enforcement of stor... | 2026-11-03 |
| CVE-2026-17472 | critical | 9.6 | No | IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wil... | 2026-11-03 |
| CVE-2026-121403 | medium | 4.3 | No | FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated IRP_MJ_CREATE bod... | 2026-11-03 |
| CVE-2026-15661 | medium | 5.3 | No | IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special el... | 2026-11-03 |
| CVE-2026-121407 | medium | 6.5 | No | FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that allows authenticated clie... | 2026-11-03 |
| CVE-2026-6930 | high | 7.5 | No | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive in... | 2026-11-03 |
| CVE-2026-121411 | low | 3.1 | No | FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing m... | 2026-11-03 |
| CVE-2026-1501 | low | 3.7 | No | IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. | 2026-11-03 |
| CVE-2026-1510 | medium | 4.7 | No | IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. | 2026-11-03 |
| CVE-2026-3303 | low | 3.7 | No | IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the... | 2026-11-03 |
| CVE-2026-3628 | medium | 5.3 | No | IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. | 2026-11-03 |
| CVE-2026-119378 | medium | 5.5 | No | SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed he... | 2026-11-03 |
| CVE-2026-119379 | high | 7.8 | No | SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows... | 2026-11-03 |