Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110283 | medium | 4.3 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service due to improper valid... | 2026-11-04 |
| CVE-2026-110282 | medium | 6.5 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper ac... | 2026-11-04 |
| CVE-2026-110281 | medium | 5.9 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an attacker to obtain sensi... | 2026-11-04 |
| CVE-2026-10859 | high | 7.5 | No | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 th... | 2026-11-04 |
| CVE-2026-111107 | not reported | — | No | A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with net... | 2026-11-04 |
| CVE-2026-111548 | not reported | — | No | A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticate... | 2026-11-04 |
| CVE-2026-108910 | medium | 4.3 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to missing req... | 2026-11-04 |
| CVE-2026-108838 | low | 3.3 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to uncontrolled resource consump... | 2026-11-04 |
| CVE-2026-108767 | medium | 4.3 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response splitting due to improper... | 2026-11-04 |
| CVE-2026-108588 | medium | 5.4 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing X... | 2026-11-04 |
| CVE-2026-109090 | high | 7.5 | No | A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4. | 2026-11-04 |
| CVE-2026-109089 | high | 7.5 | No | A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server. | 2026-11-04 |
| CVE-2026-109823 | not reported | — | No | An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the re... | 2026-11-04 |
| CVE-2026-108536 | medium | 4.6 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper re... | 2026-11-04 |
| CVE-2026-108333 | low | 2.5 | No | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | 2026-11-04 |
| CVE-2026-108332 | medium | 6.3 | No | Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. | 2026-11-04 |
| CVE-2026-108331 | low | 3.3 | No | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | 2026-11-04 |
| CVE-2026-108330 | low | 3.6 | No | Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. | 2026-11-04 |
| CVE-2026-108329 | high | 8.8 | No | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | 2026-11-04 |
| CVE-2026-108328 | medium | 4.2 | No | Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. | 2026-11-04 |