Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87184 | critical | 9.8 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-64195 | high | 7.3 | No | There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation req... | 2026-09-22 |
| CVE-2026-64196 | high | 7.3 | No | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end... | 2026-09-22 |
| CVE-2026-64197 | high | 7.3 | No | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end... | 2026-09-22 |
| CVE-2026-64198 | high | 7.3 | No | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes... | 2026-09-22 |
| CVE-2026-64199 | high | 7.3 | No | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the... | 2026-09-22 |
| CVE-2026-64200 | high | 7.3 | No | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the... | 2026-09-22 |
| CVE-2026-93959 | high | 7.3 | No | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the fi... | 2026-09-22 |
| CVE-2026-87238 | high | 8.8 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-87207 | high | 7.2 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-87202 | high | 8.8 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-86059 | critical | 9.6 | No | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy organization members without Git provider access ca... | 2026-09-22 |
| CVE-2026-85734 | critical | 9.1 | No | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightrag_server.p... | 2026-09-22 |
| CVE-2026-83210 | high | 8.8 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-22 |
| CVE-2026-83208 | high | 8.8 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that are affected are 17.... | 2026-09-22 |
| CVE-2026-79913 | medium | 6.5 | No | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side request forgery guard in... | 2026-09-22 |
| CVE-2026-77637 | low | 3.8 | No | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET("wopi") and tool.POST("mail") in routers/router.go... | 2026-09-22 |
| CVE-2026-56682 | medium | 5.3 | No | 9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custo... | 2026-09-22 |
| CVE-2026-4374 | critical | 9.1 | No | Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing... | 2026-09-22 |
| CVE-2026-19780 | high | 8.8 | No | Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect... | 2026-09-22 |