Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118251 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns credits.href to the win... | 2026-11-02 |
| CVE-2026-118247 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4.2.2, and from 2.0.0 until Grid Pro 3.2.0, Highcha... | 2026-11-02 |
| CVE-2026-118243 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCursor listener and st... | 2026-11-02 |
| CVE-2026-117681 | high | 8.0 | No | A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transpor... | 2026-11-02 |
| CVE-2026-117688 | medium | 5.3 | No | A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution. When a vault prov... | 2026-11-02 |
| CVE-2026-116795 | high | 7.5 | No | RE2JS is the JavaScript port of RE2, a regular expression engine that provides linear time matching. From 2.2.0 until 2.8.7, enabling LOOKBE... | 2026-11-02 |
| CVE-2026-115700 | not reported | — | No | Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent-encoded bracketed I... | 2026-11-02 |
| CVE-2026-115424 | medium | 5.5 | No | A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly... | 2026-11-02 |
| CVE-2026-114217 | high | 8.6 | No | A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext on the runn... | 2026-11-02 |
| CVE-2026-110314 | not reported | — | No | Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling of mtrudel bandit allows a remote client... | 2026-11-02 |
| CVE-2026-104067 | high | 7.8 | No | Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to veri... | 2026-11-02 |
| CVE-2026-104066 | high | 7.8 | No | Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin whe... | 2026-11-02 |
| CVE-2026-105781 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | 2026-11-02 |
| CVE-2026-104353 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vu... | 2026-11-02 |
| CVE-2026-104063 | medium | 6.1 | No | Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when... | 2026-11-02 |
| CVE-2026-104062 | high | 7.8 | No | Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that al... | 2026-11-02 |
| CVE-2026-69964 | high | 7.0 | No | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-69963 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-69867 | high | 7.8 | No | Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-69736 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authoriz... | 2026-11-02 |