Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-70913 | critical | 9.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are... | 2026-09-23 |
| CVE-2026-70915 | high | 8.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are... | 2026-09-23 |
| CVE-2026-89275 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in... | 2026-09-23 |
| CVE-2026-84412 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in... | 2026-09-23 |
| CVE-2026-88015 | medium | 5.3 | No | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local... | 2026-09-23 |
| CVE-2026-82443 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A... | 2026-09-23 |
| CVE-2026-82008 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the... | 2026-09-23 |
| CVE-2026-88014 | medium | 6.3 | No | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the... | 2026-09-23 |
| CVE-2026-83530 | medium | 4.3 | No | A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configured on the CEL environment, and... | 2026-09-23 |
| CVE-2026-75723 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the co... | 2026-09-23 |
| CVE-2026-75703 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in... | 2026-09-23 |
| CVE-2026-82010 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | 2026-09-23 |
| CVE-2026-88013 | medium | 5.3 | No | rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the... | 2026-09-23 |
| CVE-2026-21113 | medium | 5.5 | No | Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call wi... | 2026-09-23 |
| CVE-2026-21108 | medium | 5.5 | No | Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive infor... | 2026-09-23 |
| CVE-2026-21112 | medium | 5.5 | No | Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privileg... | 2026-09-23 |
| CVE-2026-77860 | low | 3.7 | No | In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the... | 2026-09-23 |
| CVE-2026-21107 | medium | 5.5 | No | Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory. | 2026-09-23 |
| CVE-2026-77955 | medium | 4.4 | No | In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes) which are located be... | 2026-09-23 |
| CVE-2026-21105 | medium | 5.5 | No | Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access se... | 2026-09-23 |