Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-76290 | high | 7.5 | No | In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor... | 2026-10-30 |
| CVE-2026-97631 | not reported | — | No | EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of B... | 2026-10-30 |
| CVE-2026-96389 | medium | 6.5 | No | Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit versions: from 0.0.0 to 1.6... | 2026-10-30 |
| CVE-2026-96391 | medium | 4.3 | No | Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to... | 2026-10-30 |
| CVE-2026-96379 | low | 3.5 | No | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr allows Stored XSS.... | 2026-10-30 |
| CVE-2026-96363 | low | 3.1 | No | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to... | 2026-10-30 |
| CVE-2026-95117 | low | 3.7 | No | Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_pa... | 2026-10-30 |
| CVE-2026-88086 | medium | 5.3 | No | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. | 2026-10-30 |
| CVE-2026-88084 | medium | 5.3 | No | Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. | 2026-10-30 |
| CVE-2026-87938 | medium | 6.5 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. T... | 2026-10-30 |
| CVE-2026-87346 | high | 8.7 | No | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP... | 2026-10-30 |
| CVE-2026-88081 | high | 7.7 | No | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | 2026-10-30 |
| CVE-2026-86948 | high | 8.8 | No | This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to br... | 2026-10-30 |
| CVE-2026-86935 | medium | 5.5 | No | This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user... | 2026-10-30 |
| CVE-2026-7005 | medium | 6.1 | No | WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an... | 2026-10-30 |
| CVE-2026-79884 | high | 8.2 | No | A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentic... | 2026-10-30 |
| CVE-2026-79883 | high | 8.3 | No | A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sen... | 2026-10-30 |
| CVE-2026-79882 | high | 8.3 | No | There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adj... | 2026-10-30 |
| CVE-2026-79881 | high | 8.3 | No | An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumv... | 2026-10-30 |
| CVE-2026-79880 | high | 8.7 | No | A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server... | 2026-10-30 |