Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-18110 high 7.5 No Concrete CMS 9 (9.0.0 through 9.5.2) does not perform an authorization check on the user selector autocomplete endpoint (/ccm/system/user/au... 2026-09-22
CVE-2026-87140 high 7.5 No Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... 2026-09-22
CVE-2026-87139 high 7.5 No Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... 2026-09-22
CVE-2026-87138 high 7.5 No Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... 2026-09-22
CVE-2026-69760 high 7.5 No Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network. 2026-09-22
CVE-2026-69744 high 7.5 No Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network. 2026-09-22
CVE-2026-69741 medium 5.5 No Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. 2026-09-22
CVE-2026-87266 high 8.2 No Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected... 2026-09-22
CVE-2026-87130 high 7.4 No Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... 2026-09-22
CVE-2026-87129 critical 9.1 No Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... 2026-09-22
CVE-2026-77122 medium 4.3 No An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Rep... 2026-09-22
CVE-2026-77123 medium 6.5 No Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabi... 2026-09-22
CVE-2026-77124 high 7.2 No In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether s... 2026-09-22
CVE-2026-87190 high 7.5 No Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... 2026-09-22
CVE-2026-87191 high 7.1 No Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... 2026-09-22
CVE-2026-87219 high 8.4 No Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... 2026-09-22
CVE-2026-87220 high 7.1 No Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... 2026-09-22
CVE-2026-77125 high 7.1 No A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly e... 2026-09-22
CVE-2026-87221 high 7.5 No Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... 2026-09-22
CVE-2026-87222 high 7.5 No Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... 2026-09-22