Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101488 | medium | 6.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... | 2026-10-29 |
| CVE-2026-101474 | medium | 5.9 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-29 |
| CVE-2026-101471 | medium | 6.1 | No | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported versi... | 2026-10-29 |
| CVE-2026-101459 | high | 8.3 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-10-29 |
| CVE-2026-101432 | medium | 5.3 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are... | 2026-10-29 |
| CVE-2026-101415 | low | 3.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that ar... | 2026-10-29 |
| CVE-2026-101412 | medium | 5.8 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that ar... | 2026-10-29 |
| CVE-2026-100175 | medium | 5.4 | No | The Postie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Body URL Autolink in all versions up to, and includin... | 2026-10-29 |
| CVE-2025-65200 | critical | 9.6 | No | An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL... | 2026-10-29 |
| CVE-2026-101407 | medium | 5.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant). Supported version... | 2026-10-29 |
| CVE-2026-101365 | medium | 4.7 | No | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exp... | 2026-10-29 |
| CVE-2026-55561 | not reported | — | No | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-beta-1, guest users can a... | 2026-10-28 |
| CVE-2026-111575 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-28 |
| CVE-2026-111486 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-28 |
| CVE-2026-111478 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-28 |
| CVE-2026-72694 | high | 7.1 | No | A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker... | 2026-10-28 |
| CVE-2026-54453 | high | 7.2 | No | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to version 0.10.0, th... | 2026-10-28 |
| CVE-2026-118753 | high | 7.8 | No | FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attackers to write past t... | 2026-10-28 |
| CVE-2026-118752 | high | 7.8 | No | FreeImage (danoli3 fork) before 3.19.22 contains a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bou... | 2026-10-28 |
| CVE-2026-0631 | high | 8.0 | No | An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AX... | 2026-10-28 |