Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-109248 | medium | 6.5 | No | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard function convert_filedescriptors_to_file_list(), which... | 2026-11-02 |
| CVE-2026-109247 | low | 3.1 | No | FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/syntheti... | 2026-11-02 |
| CVE-2026-109246 | medium | 6.5 | No | FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Ackn... | 2026-11-02 |
| CVE-2026-109245 | medium | 6.8 | No | FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c t... | 2026-11-02 |
| CVE-2026-109244 | medium | 6.6 | No | FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys witho... | 2026-11-02 |
| CVE-2026-109243 | medium | 4.4 | No | FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys writ... | 2026-11-02 |
| CVE-2026-91906 | medium | 5.5 | No | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low... | 2026-11-02 |
| CVE-2026-91911 | medium | 6.1 | No | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversa... | 2026-11-02 |
| CVE-2026-112510 | high | 7.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.... | 2026-11-02 |
| CVE-2026-112551 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An a... | 2026-11-02 |
| CVE-2026-112642 | medium | 6.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS... | 2026-11-02 |
| CVE-2026-93847 | low | 3.5 | No | Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which... | 2026-11-02 |
| CVE-2026-93846 | low | 3.8 | No | Mattermost versions 11.7.x <= 11.7.10 fail to restrict which built-in roles can be assigned to a team member via the API, which allows a tea... | 2026-11-02 |
| CVE-2026-90723 | low | 2.7 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-11-02 |
| CVE-2026-90719 | low | 2.7 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-11-02 |
| CVE-2026-90727 | low | 3.8 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-11-02 |
| CVE-2026-84599 | high | 7.8 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Gold... | 2026-11-02 |
| CVE-2026-77817 | medium | 6.5 | No | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitizati... | 2026-11-02 |
| CVE-2026-77057 | not reported | — | No | boneIO Black does not limit authentication attempts on its web interface (POST /api/login) or SSH service, and does not enforce password com... | 2026-11-02 |
| CVE-2026-77055 | not reported | — | No | boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo access and membership in... | 2026-11-02 |