Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-105765 high 7.5 No HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's service mesh leaf certifi... 2026-11-02
CVE-2026-101186 high 7.5 No DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. 2026-11-02
CVE-2026-104310 medium 4.3 No IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to a server-side reque... 2026-11-02
CVE-2026-104351 critical 9.9 No Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in... 2026-11-02
CVE-2026-104350 critical 9.3 No Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerabili... 2026-11-02
CVE-2026-104189 high 7.5 No The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions... 2026-11-02
CVE-2026-101184 medium 5.5 No Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. 2026-11-02
CVE-2026-101185 medium 5.9 No OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 2026-11-02
CVE-2026-101183 medium 5.9 No UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. 2026-11-02
CVE-2026-101182 medium 5.9 No Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. 2026-11-02
CVE-2026-101181 medium 5.5 No Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiali... 2026-11-02
CVE-2026-101180 medium 4.3 No DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. 2026-11-02
CVE-2026-101179 medium 4.7 No Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability. 2026-11-02
CVE-2026-101178 medium 6.6 No Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service co... 2026-11-02
CVE-2026-101177 low 3.7 No Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confident... 2026-11-02
CVE-2026-101176 high 7.1 No Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affe... 2026-11-02
CVE-2026-101175 medium 4.3 No Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability. 2026-11-02
CVE-2026-101174 medium 5.7 No DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. 2026-11-02
CVE-2026-101173 medium 6.5 No DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. 2026-11-02
CVE-2026-101172 medium 6.2 No Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality. 2026-11-02