Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82117 | critical | 9.8 | No | Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Ser... | 2026-11-04 |
| CVE-2026-82116 | critical | 9.8 | No | Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01... | 2026-11-04 |
| CVE-2026-76939 | critical | 9.8 | No | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3... | 2026-11-04 |
| CVE-2026-76936 | critical | 9.4 | No | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System... | 2026-11-04 |
| CVE-2026-76933 | critical | 9.4 | No | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3... | 2026-11-04 |
| CVE-2026-76932 | critical | 9.4 | No | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System... | 2026-11-04 |
| CVE-2026-66736 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-04 |
| CVE-2026-65555 | critical | 9.8 | No | Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalat... | 2026-11-04 |
| CVE-2026-112599 | medium | 6.5 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Go... | 2026-11-04 |
| CVE-2026-65213 | medium | 6.6 | No | This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC | 2026-11-04 |
| CVE-2026-65211 | high | 7.2 | No | This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC... | 2026-11-04 |
| CVE-2026-65220 | high | 8.8 | No | A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to admini... | 2026-11-04 |
| CVE-2026-65219 | high | 7.4 | No | A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an... | 2026-11-04 |
| CVE-2026-65210 | medium | 4.9 | No | This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond th... | 2026-11-04 |
| CVE-2026-39431 | not reported | — | No | On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows comm... | 2026-11-04 |
| CVE-2026-39430 | not reported | — | No | On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls a... | 2026-11-04 |
| CVE-2026-18451 | low | 3.1 | No | The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker... | 2026-11-04 |
| CVE-2026-18450 | critical | 9.8 | No | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that ex... | 2026-11-04 |
| CVE-2026-18449 | high | 7.5 | No | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that ex... | 2026-11-04 |
| CVE-2026-13048 | high | 8.2 | No | Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load... | 2026-11-04 |