Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111464 | medium | 5.9 | No | The WP Fastest Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.3. The p... | 2026-11-03 |
| CVE-2026-117069 | high | 7.5 | No | An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker t... | 2026-11-03 |
| CVE-2026-106803 | critical | 9.8 | No | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted application/... | 2026-11-03 |
| CVE-2026-103799 | critical | 9.6 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-11-03 |
| CVE-2026-119574 | medium | 5.9 | No | Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attackers to crash the proce... | 2026-11-03 |
| CVE-2026-119718 | high | 7.8 | No | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc()... | 2026-11-03 |
| CVE-2026-86383 | medium | 6.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 rele... | 2026-11-03 |
| CVE-2026-59176 | high | 7.8 | No | Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP tool in `functype-mcp-se... | 2026-11-03 |
| CVE-2026-58256 | critical | 9.1 | No | GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject ma... | 2026-11-03 |
| CVE-2026-57192 | not reported | — | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-11-03 |
| CVE-2026-118250 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6.1, and 3.1.0, Highcharts follows dot-separated se... | 2026-11-03 |
| CVE-2026-118246 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts applies breadcrumbs.st... | 2026-11-03 |
| CVE-2026-118375 | high | 8.1 | No | llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() function that allows... | 2026-11-03 |
| CVE-2026-118371 | low | 3.7 | No | LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new() and OCSP_parse_url() functions, which wri... | 2026-11-03 |
| CVE-2026-118274 | medium | 4.3 | No | A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality of the file renderers... | 2026-11-03 |
| CVE-2026-118271 | medium | 4.3 | No | A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknown function of the file renderers/web_cor... | 2026-11-03 |
| CVE-2026-118242 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from renderin... | 2026-11-03 |
| CVE-2026-117608 | medium | 6.1 | No | Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers to bypass frame table... | 2026-11-03 |
| CVE-2026-116775 | not reported | — | No | pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate with a running Pageant... | 2026-11-03 |
| CVE-2026-116695 | not reported | — | No | Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing p... | 2026-11-03 |