Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-90551 | medium | 5.3 | No | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the video_from_program API endpo... | 2026-09-21 |
| CVE-2026-90546 | medium | 4.3 | No | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the like.json.php endpoint... | 2026-09-21 |
| CVE-2026-90536 | medium | 5.3 | No | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to authorize access to the adsInfo API endpoint, allowing unauthen... | 2026-09-21 |
| CVE-2026-90494 | medium | 5.3 | No | A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. Thi... | 2026-09-21 |
| CVE-2026-56889 | medium | 6.7 | No | In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege wi... | 2026-09-21 |
| CVE-2026-83251 | medium | 6.5 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The s... | 2026-09-21 |
| CVE-2026-83250 | medium | 6.5 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The s... | 2026-09-21 |
| CVE-2026-83248 | high | 8.2 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The s... | 2026-09-21 |
| CVE-2026-83244 | high | 7.1 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The s... | 2026-09-21 |
| CVE-2026-83243 | high | 7.7 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma... | 2026-09-21 |
| CVE-2026-83240 | high | 7.1 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The s... | 2026-09-21 |
| CVE-2026-83238 | high | 7.1 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The s... | 2026-09-21 |
| CVE-2026-83237 | high | 7.1 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The s... | 2026-09-21 |
| CVE-2026-83236 | high | 8.2 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma... | 2026-09-21 |
| CVE-2026-83235 | high | 7.5 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma... | 2026-09-21 |
| CVE-2026-83234 | high | 8.2 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma... | 2026-09-21 |
| CVE-2026-56892 | medium | 6.2 | No | In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local inform... | 2026-09-21 |
| CVE-2026-83221 | high | 7.1 | No | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.... | 2026-09-21 |
| CVE-2026-83217 | high | 7.1 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-09-21 |
| CVE-2026-83215 | high | 8.2 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-21 |