Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-63278 | not reported | — | No | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated... | 2026-09-22 |
| CVE-2026-63276 | not reported | — | No | LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embe... | 2026-09-22 |
| CVE-2026-63275 | not reported | — | No | LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The n... | 2026-09-22 |
| CVE-2026-63274 | not reported | — | No | LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of the stream was taken... | 2026-09-22 |
| CVE-2026-63273 | not reported | — | No | LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption... | 2026-09-22 |
| CVE-2026-63272 | not reported | — | No | LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that ca... | 2026-09-22 |
| CVE-2026-89422 | not reported | — | No | Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to imperso... | 2026-09-22 |
| CVE-2026-82672 | not reported | — | No | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint mint allows a malicious HTTP/1... | 2026-09-22 |
| CVE-2026-83026 | high | 8.3 | No | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are af... | 2026-09-22 |
| CVE-2026-83027 | critical | 9.3 | No | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are af... | 2026-09-22 |
| CVE-2026-83028 | high | 7.5 | No | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are af... | 2026-09-22 |
| CVE-2026-94570 | medium | 5.9 | No | SGLang contains a DoS vulnerability caused by missing input validation for AUX_DATA ZeroMQ control messages in the Decode worker, which enab... | 2026-09-22 |
| CVE-2026-49811 | high | 8.4 | No | Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A l... | 2026-09-22 |
| CVE-2026-82165 | medium | 5.5 | No | Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vulnerability. A low p... | 2026-09-22 |
| CVE-2026-82163 | medium | 5.5 | No | Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged att... | 2026-09-22 |
| CVE-2026-83042 | critical | 9.8 | No | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are aff... | 2026-09-22 |
| CVE-2026-83054 | critical | 9.8 | No | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are... | 2026-09-22 |
| CVE-2026-83059 | critical | 10.0 | No | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are... | 2026-09-22 |
| CVE-2026-69711 | high | 7.0 | No | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 2026-09-22 |
| CVE-2026-83060 | critical | 9.8 | No | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are... | 2026-09-22 |