Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-94100 | critical | 9.9 | No | A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/rout... | 2026-09-21 |
| CVE-2026-94095 | critical | 9.9 | No | A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file... | 2026-09-21 |
| CVE-2026-94090 | medium | 6.3 | No | A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/... | 2026-09-21 |
| CVE-2026-94048 | medium | 6.6 | No | A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controlle... | 2026-09-21 |
| CVE-2026-94043 | medium | 5.3 | No | A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_deps/free5gc/NFs/amf/... | 2026-09-21 |
| CVE-2026-90860 | high | 7.1 | No | The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebVie... | 2026-09-21 |
| CVE-2026-94038 | high | 7.3 | No | A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx... | 2026-09-21 |
| CVE-2026-87205 | high | 7.5 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87200 | high | 8.2 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87197 | high | 8.2 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87196 | high | 8.2 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-21 |
| CVE-2026-87161 | high | 8.5 | No | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af... | 2026-09-21 |
| CVE-2026-87160 | high | 7.1 | No | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af... | 2026-09-21 |
| CVE-2026-87149 | high | 7.1 | No | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Suppor... | 2026-09-21 |
| CVE-2026-87126 | high | 7.1 | No | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Reports Security). Supported versions that are aff... | 2026-09-21 |
| CVE-2026-84285 | high | 8.8 | No | An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrar... | 2026-09-21 |
| CVE-2026-83484 | high | 7.1 | No | Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versio... | 2026-09-21 |
| CVE-2026-83436 | high | 7.1 | No | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management). Supported versions that are affe... | 2026-09-21 |
| CVE-2026-83346 | medium | 5.4 | No | Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that ar... | 2026-09-21 |
| CVE-2026-83345 | high | 7.1 | No | Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12... | 2026-09-21 |