Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-14260 | high | 8.3 | No | Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied input related to resource location withou... | 2026-10-29 |
| CVE-2025-30414 | high | 7.1 | No | Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows)... | 2026-10-29 |
| CVE-2024-58393 | high | 8.2 | No | i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that allows unauthenticated attack... | 2026-10-29 |
| CVE-2022-51026 | critical | 9.8 | No | Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. Th... | 2026-10-29 |
| CVE-2022-51023 | high | 8.2 | No | PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses vi... | 2026-10-29 |
| CVE-2021-48016 | critical | 9.8 | No | DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemp... | 2026-10-29 |
| CVE-2026-92665 | medium | 5.3 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-92797 | high | 8.8 | No | The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a... | 2026-10-29 |
| CVE-2026-97019 | high | 7.2 | No | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headline-*' Shortcode Attri... | 2026-10-29 |
| CVE-2026-93862 | not reported | — | No | An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a... | 2026-10-29 |
| CVE-2026-91247 | medium | 5.9 | No | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are aff... | 2026-10-29 |
| CVE-2026-91238 | high | 7.1 | No | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected ar... | 2026-10-29 |
| CVE-2026-86377 | high | 7.6 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-86392 | medium | 4.9 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-86391 | medium | 6.4 | No | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1... | 2026-10-29 |
| CVE-2026-90721 | low | 3.4 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-85655 | medium | 4.3 | No | The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.2. This is due... | 2026-10-29 |
| CVE-2026-90725 | medium | 4.9 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |
| CVE-2026-90732 | medium | 4.9 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS20... | 2026-10-29 |
| CVE-2026-90731 | medium | 4.9 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-10-29 |