Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-58827 | high | 8.4 | No | In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privi... | 2026-11-03 |
| CVE-2026-58826 | high | 8.4 | No | In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege w... | 2026-11-03 |
| CVE-2026-58825 | high | 8.4 | No | In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of... | 2026-11-03 |
| CVE-2026-55289 | high | 8.4 | No | In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could lead... | 2026-11-03 |
| CVE-2026-55287 | high | 8.4 | No | In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to m... | 2026-11-03 |
| CVE-2026-55283 | high | 8.4 | No | In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege wi... | 2026-11-03 |
| CVE-2026-55275 | high | 8.4 | No | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no... | 2026-11-03 |
| CVE-2026-55271 | high | 8.4 | No | In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. This c... | 2026-11-03 |
| CVE-2026-55262 | high | 8.4 | No | In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due... | 2026-11-03 |
| CVE-2026-55257 | high | 8.4 | No | In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local... | 2026-11-03 |
| CVE-2026-88094 | high | 8.1 | No | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an author... | 2026-11-03 |
| CVE-2026-78162 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 bef... | 2026-11-03 |
| CVE-2026-119573 | low | 3.0 | No | Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-namespace check... | 2026-11-03 |
| CVE-2026-73697 | high | 8.8 | No | Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpini_e... | 2026-11-03 |
| CVE-2026-73695 | high | 8.8 | No | Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php that allows attacke... | 2026-11-03 |
| CVE-2026-75520 | medium | 5.4 | No | Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, the `udevices` JSON com... | 2026-11-03 |
| CVE-2026-51903 | high | 8.1 | No | SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.... | 2026-11-03 |
| CVE-2026-61564 | critical | 10.0 | No | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.php` assembles `video... | 2026-11-03 |
| CVE-2026-54453 | high | 7.2 | No | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to version 0.10.0, th... | 2026-11-03 |
| CVE-2026-61542 | high | 8.6 | No | Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the affected compon... | 2026-11-03 |