Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108326 | medium | 6.5 | No | Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. | 2026-11-04 |
| CVE-2026-108325 | medium | 6.6 | No | Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. | 2026-11-04 |
| CVE-2026-108316 | medium | 4.3 | No | Tanium addressed an information disclosure vulnerability in Tanium Server. | 2026-11-04 |
| CVE-2026-108310 | medium | 5.3 | No | Tanium addressed a denial of service vulnerability in Tanium Server. | 2026-11-04 |
| CVE-2026-108307 | high | 7.8 | No | Tanium addressed a heap-based buffer overflow vulnerability in Index. | 2026-11-04 |
| CVE-2026-108306 | high | 7.8 | No | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 2026-11-04 |
| CVE-2026-108305 | high | 7.8 | No | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 2026-11-04 |
| CVE-2026-108303 | high | 8.8 | No | Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. | 2026-11-04 |
| CVE-2026-108302 | medium | 4.3 | No | Tanium addressed an improper access controls vulnerability in Comply. | 2026-11-04 |
| CVE-2026-108301 | medium | 6.0 | No | Tanium addressed an improper access controls vulnerability in Comply. | 2026-11-04 |
| CVE-2026-108142 | not reported | — | No | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. | 2026-11-04 |
| CVE-2026-108140 | not reported | — | No | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to w... | 2026-11-04 |
| CVE-2026-105991 | low | 3.5 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing C... | 2026-11-04 |
| CVE-2026-105702 | medium | 4.3 | No | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive information due to exposure of... | 2026-11-04 |
| CVE-2026-108015 | not reported | — | No | Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts cer... | 2026-11-04 |
| CVE-2026-108014 | not reported | — | No | Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts cer... | 2026-11-04 |
| CVE-2026-106077 | not reported | — | No | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with... | 2026-11-04 |
| CVE-2026-106076 | not reported | — | No | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backu... | 2026-11-04 |
| CVE-2026-107590 | not reported | — | No | An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and ea... | 2026-11-04 |
| CVE-2026-104203 | high | 7.5 | No | Traccar is an open source GPS tracking system. From 5.1 until 6.15.0, WebModule.java's MediaFilter Guice mapping and WebServer.java's Jetty... | 2026-11-04 |