Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-53995 | high | 8.2 | No | MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to... | 2026-11-02 |
| CVE-2026-2102 | medium | 6.1 | No | wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareRe... | 2026-11-02 |
| CVE-2026-20590 | medium | 4.4 | No | In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has alrea... | 2026-11-02 |
| CVE-2026-20583 | medium | 4.4 | No | In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already... | 2026-11-02 |
| CVE-2026-20580 | medium | 4.4 | No | In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already... | 2026-11-02 |
| CVE-2026-20577 | medium | 4.4 | No | In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor... | 2026-11-02 |
| CVE-2026-20566 | medium | 4.8 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has co... | 2026-11-02 |
| CVE-2026-20564 | medium | 6.2 | No | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no addit... | 2026-11-02 |
| CVE-2026-20553 | medium | 6.8 | No | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attack... | 2026-11-02 |
| CVE-2026-20552 | medium | 6.5 | No | In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no addition... | 2026-11-02 |
| CVE-2026-20551 | medium | 5.5 | No | In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additiona... | 2026-11-02 |
| CVE-2026-18800 | medium | 4.4 | No | When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the affected products log these ir... | 2026-11-02 |
| CVE-2026-20550 | medium | 6.2 | No | In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additiona... | 2026-11-02 |
| CVE-2026-20526 | high | 7.1 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-11-02 |
| CVE-2026-20518 | medium | 4.2 | No | In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a... | 2026-11-02 |
| CVE-2026-20515 | medium | 5.0 | No | In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileg... | 2026-11-02 |
| CVE-2026-120216 | medium | 5.9 | No | fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero handlerTimeout and a... | 2026-11-02 |
| CVE-2026-120215 | low | 3.7 | No | @fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers the plugin w... | 2026-11-02 |
| CVE-2026-120214 | medium | 5.9 | No | @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In versions 11.6.0 throu... | 2026-11-02 |
| CVE-2026-120213 | critical | 9.1 | No | @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In versions 9.0.0 throug... | 2026-11-02 |