Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87133 | high | 7.6 | No | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... | 2026-09-22 |
| CVE-2026-88807 | not reported | — | No | A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X cl... | 2026-09-22 |
| CVE-2026-88806 | high | 7.5 | No | A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map. | 2026-09-22 |
| CVE-2026-89139 | not reported | — | No | Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module registers a compute provider named sub... | 2026-09-22 |
| CVE-2026-87858 | not reported | — | No | Temporal Server decided whether a Workflow completion callback was internal by reading a caller-supplied HTTP header. An authenticated calle... | 2026-09-22 |
| CVE-2026-65654 | not reported | — | No | github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application changes the local node's labels, but affected v... | 2026-09-22 |
| CVE-2026-65653 | not reported | — | No | github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metadata but no length-prefixed argument chunks... | 2026-09-22 |
| CVE-2026-65652 | not reported | — | No | github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChannel call frames. A network peer that can... | 2026-09-22 |
| CVE-2026-65651 | not reported | — | No | temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree witho... | 2026-09-22 |
| CVE-2026-16652 | not reported | — | No | Temporal Server did not bound the work performed while searching for a Schedule's next action time. An authenticated caller with namespace w... | 2026-09-22 |
| CVE-2026-16651 | not reported | — | No | temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processes a MySQL version comment whose contents are empty or consis... | 2026-09-22 |
| CVE-2026-87132 | high | 7.6 | No | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... | 2026-09-22 |
| CVE-2026-87131 | high | 7.6 | No | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... | 2026-09-22 |
| CVE-2026-87145 | high | 7.3 | No | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... | 2026-09-22 |
| CVE-2026-87147 | high | 7.7 | No | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... | 2026-09-22 |
| CVE-2026-18626 | not reported | — | No | Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Profession... | 2026-09-22 |
| CVE-2026-18462 | not reported | — | No | Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Ma... | 2026-09-22 |
| CVE-2026-18461 | not reported | — | No | Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This i... | 2026-09-22 |
| CVE-2026-18460 | not reported | — | No | Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects... | 2026-09-22 |
| CVE-2026-18459 | not reported | — | No | Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. This issue affects Con... | 2026-09-22 |