Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101459 | high | 8.3 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-10-29 |
| CVE-2026-101432 | medium | 5.3 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are... | 2026-10-29 |
| CVE-2026-101415 | low | 3.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that ar... | 2026-10-29 |
| CVE-2026-101412 | medium | 5.8 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that ar... | 2026-10-29 |
| CVE-2026-100175 | medium | 5.4 | No | The Postie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Body URL Autolink in all versions up to, and includin... | 2026-10-29 |
| CVE-2025-65200 | critical | 9.6 | No | An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL... | 2026-10-29 |
| CVE-2026-101407 | medium | 5.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant). Supported version... | 2026-10-29 |
| CVE-2026-101365 | medium | 4.7 | No | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exp... | 2026-10-29 |
| CVE-2026-21157 | not reported | — | No | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity. | 2026-10-29 |
| CVE-2026-118590 | medium | 5.3 | No | A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nib... | 2026-10-29 |
| CVE-2026-113957 | not reported | — | No | An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pul... | 2026-10-29 |
| CVE-2026-118589 | medium | 5.3 | No | A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42.py of the component... | 2026-10-29 |
| CVE-2026-118586 | medium | 5.3 | No | A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the file feedfinder2.py. P... | 2026-10-29 |
| CVE-2026-118585 | low | 3.5 | No | A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad931c218140df4fb23809... | 2026-10-29 |
| CVE-2026-86983 | not reported | — | No | A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its lengt... | 2026-10-28 |
| CVE-2026-85749 | high | 8.1 | No | MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, including the U/user,... | 2026-10-28 |
| CVE-2026-82411 | medium | 6.5 | No | Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token... | 2026-10-28 |
| CVE-2026-75520 | medium | 5.4 | No | Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, the `udevices` JSON com... | 2026-10-28 |
| CVE-2026-55561 | not reported | — | No | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-beta-1, guest users can a... | 2026-10-28 |
| CVE-2026-118579 | critical | 9.8 | No | A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the comp... | 2026-10-28 |