Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106013 | critical | 9.8 | No | The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to... | 2026-10-29 |
| CVE-2026-103410 | high | 7.5 | No | An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote a... | 2026-10-29 |
| CVE-2026-103400 | medium | 5.5 | No | An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in... | 2026-10-29 |
| CVE-2026-103394 | low | 3.7 | No | An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic... | 2026-10-29 |
| CVE-2026-103390 | medium | 5.3 | No | An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows... | 2026-10-29 |
| CVE-2026-101935 | medium | 6.1 | No | The Echo Knowledge Base – Documentation, FAQs, Chat & Smart Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via... | 2026-10-29 |
| CVE-2026-104740 | medium | 6.4 | No | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting... | 2026-10-29 |
| CVE-2026-104729 | medium | 6.4 | No | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_index, empty_notice' parameter in... | 2026-10-29 |
| CVE-2026-103370 | medium | 6.4 | No | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpas_fi... | 2026-10-29 |
| CVE-2026-101593 | high | 8.3 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-29 |
| CVE-2026-101584 | medium | 6.5 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket). Supported versions that are affec... | 2026-10-29 |
| CVE-2026-101583 | high | 7.0 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper). Supported versions that are affected ar... | 2026-10-29 |
| CVE-2026-101575 | medium | 6.5 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Dif... | 2026-10-29 |
| CVE-2026-101570 | low | 3.7 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected... | 2026-10-29 |
| CVE-2026-101524 | medium | 5.6 | No | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). Supported... | 2026-10-29 |
| CVE-2026-101502 | medium | 5.0 | No | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to explo... | 2026-10-29 |
| CVE-2026-101497 | medium | 4.3 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework). Supported versions that a... | 2026-10-29 |
| CVE-2026-101488 | medium | 6.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... | 2026-10-29 |
| CVE-2026-101474 | medium | 5.9 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-29 |
| CVE-2026-101471 | medium | 6.1 | No | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported versi... | 2026-10-29 |