Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-56866 | high | 7.5 | No | When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without fra... | 2026-10-09 |
| CVE-2026-56857 | critical | 9.8 | No | On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory... | 2026-10-09 |
| CVE-2026-107726 | not reported | — | No | Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improp... | 2026-10-09 |
| CVE-2026-107725 | not reported | — | No | Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missin... | 2026-10-09 |
| CVE-2026-83429 | high | 8.1 | No | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions... | 2026-10-09 |
| CVE-2026-83479 | high | 8.8 | No | Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affec... | 2026-10-09 |
| CVE-2026-83443 | medium | 6.5 | No | Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected... | 2026-10-09 |
| CVE-2026-83438 | high | 8.2 | No | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are aff... | 2026-10-09 |
| CVE-2026-83437 | high | 7.7 | No | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affec... | 2026-10-09 |
| CVE-2026-83451 | high | 8.5 | No | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that a... | 2026-10-09 |
| CVE-2026-83433 | medium | 6.5 | No | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that a... | 2026-10-09 |
| CVE-2026-83432 | high | 8.1 | No | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions tha... | 2026-10-09 |
| CVE-2026-83435 | high | 8.2 | No | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that a... | 2026-10-09 |
| CVE-2026-83455 | high | 8.1 | No | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions... | 2026-10-09 |
| CVE-2026-104335 | high | 8.8 | No | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control. | 2026-10-09 |
| CVE-2026-83456 | high | 8.8 | No | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions... | 2026-10-09 |
| CVE-2026-83457 | high | 8.1 | No | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions... | 2026-10-09 |
| CVE-2026-96761 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop... | 2026-10-09 |
| CVE-2026-96518 | medium | 5.9 | No | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Se... | 2026-10-09 |
| CVE-2026-96333 | high | 7.5 | No | Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: fr... | 2026-10-09 |