Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-69664 | not reported | — | No | Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to ca... | 2026-09-22 |
| CVE-2026-93296 | not reported | — | No | MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics views. The event General card and the ser... | 2026-09-22 |
| CVE-2026-93295 | not reported | — | No | MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user. Background job arg... | 2026-09-22 |
| CVE-2026-94301 | critical | 9.8 | No | The fix for CVE-2026-47065/ZDRES-232 ("resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy"), releas... | 2026-09-22 |
| CVE-2026-87288 | high | 8.1 | No | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalV... | 2026-09-22 |
| CVE-2026-87287 | high | 8.1 | No | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalV... | 2026-09-22 |
| CVE-2026-87286 | high | 8.1 | No | Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalV... | 2026-09-22 |
| CVE-2026-83408 | high | 8.1 | No | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is a... | 2026-09-22 |
| CVE-2026-83357 | high | 8.1 | No | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is a... | 2026-09-22 |
| CVE-2026-83283 | critical | 9.8 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The support... | 2026-09-22 |
| CVE-2026-83269 | critical | 9.8 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected... | 2026-09-22 |
| CVE-2026-93314 | medium | 6.3 | No | A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTru... | 2026-09-22 |
| CVE-2026-93309 | medium | 4.3 | No | A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of the component VES Col... | 2026-09-22 |
| CVE-2026-20516 | medium | 5.5 | No | In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with Us... | 2026-09-22 |
| CVE-2026-54613 | medium | 5.4 | No | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, getThemeFolder() i... | 2026-09-22 |
| CVE-2026-94143 | high | 7.3 | No | A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library M... | 2026-09-21 |
| CVE-2026-94033 | low | 3.5 | No | A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drug_r... | 2026-09-21 |
| CVE-2026-93980 | high | 7.3 | No | A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin... | 2026-09-21 |
| CVE-2026-93975 | low | 2.4 | No | A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php... | 2026-09-21 |
| CVE-2026-93965 | medium | 6.6 | No | A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the... | 2026-09-21 |