Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-37603 | medium | 6.5 | No | Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder (pH7 Social Dating CMS) thro... | 2026-09-23 |
| CVE-2026-93616 | critical | 9.8 | Listed | A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Poin... | 2026-09-23 |
| CVE-2026-54687 | critical | 9.8 | No | n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the... | 2026-09-23 |
| CVE-2026-93342 | medium | 5.4 | No | MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_duplicate_product AJAX action... | 2026-09-23 |
| CVE-2026-94536 | medium | 4.3 | No | lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing authenticated users... | 2026-09-23 |
| CVE-2026-93340 | medium | 6.8 | No | Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain... | 2026-09-23 |
| CVE-2026-92419 | not reported | — | No | WEBCON BPS is vulnerable to Insecure Direct Object Reference (IDOR) in the /api/vacations/{path} endpoint. The selectedPeople parameter in t... | 2026-09-23 |
| CVE-2026-43641 | critical | 9.8 | No | Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command injection vulnerability in the billing module handler that a... | 2026-09-23 |
| CVE-2026-83099 | critical | 10.0 | No | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that ar... | 2026-09-23 |
| CVE-2026-83104 | critical | 9.1 | No | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that ar... | 2026-09-23 |
| CVE-2026-83100 | critical | 9.8 | No | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that ar... | 2026-09-23 |
| CVE-2026-78442 | high | 8.8 | No | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network. | 2026-09-23 |
| CVE-2026-78441 | medium | 6.5 | No | Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network. | 2026-09-23 |
| CVE-2026-83098 | critical | 9.8 | No | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that ar... | 2026-09-23 |
| CVE-2026-83097 | medium | 6.5 | No | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that ar... | 2026-09-23 |
| CVE-2026-83095 | critical | 9.8 | No | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that ar... | 2026-09-23 |
| CVE-2026-83094 | critical | 9.8 | No | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that ar... | 2026-09-23 |
| CVE-2026-83093 | high | 8.6 | No | Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that ar... | 2026-09-23 |
| CVE-2026-83041 | high | 7.7 | No | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are... | 2026-09-23 |
| CVE-2026-83040 | critical | 9.6 | No | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are... | 2026-09-23 |