Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83201 | critical | 9.1 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-21 |
| CVE-2026-83202 | critical | 9.1 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-21 |
| CVE-2026-83222 | high | 7.5 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-21 |
| CVE-2026-83225 | high | 7.5 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-21 |
| CVE-2026-94393 | not reported | — | No | When a user creates or edits a report inside an event, MISP can identify an existing report using its UUID without properly checking whether... | 2026-09-21 |
| CVE-2026-94379 | not reported | — | No | The login() function in MISP's UsersController.php contained insufficient HTTP method validation for several security-critical code paths. T... | 2026-09-21 |
| CVE-2026-94374 | not reported | — | No | MISP contains an insecure direct object reference vulnerability in the processModuleResultsData method of the Event model. When processing m... | 2026-09-21 |
| CVE-2026-94373 | not reported | — | No | MISP contains a DOM-based cross-site scripting (XSS) vulnerability in the contextual menu JavaScript component. The ContextualMenu class pop... | 2026-09-21 |
| CVE-2026-94372 | not reported | — | No | MISP contains a stored cross-site scripting (XSS) vulnerability in the default theme's Galaxies index page. When a MISP instance detects unk... | 2026-09-21 |
| CVE-2026-94151 | medium | 5.3 | No | A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of the file /role-permission/permis... | 2026-09-21 |
| CVE-2026-94145 | low | 3.5 | No | A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0. This vulnerability affects unknown code of the file xxl-job-admin/src/m... | 2026-09-21 |
| CVE-2026-94138 | medium | 6.6 | No | A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown funct... | 2026-09-21 |
| CVE-2026-94103 | medium | 4.7 | No | A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/site_pagePHP.php of the... | 2026-09-21 |
| CVE-2026-93923 | high | 8.8 | No | SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scri... | 2026-09-21 |
| CVE-2026-93740 | critical | 10.0 | No | A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncry... | 2026-09-21 |
| CVE-2026-83228 | high | 7.5 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-21 |
| CVE-2026-83416 | medium | 4.3 | No | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1... | 2026-09-21 |
| CVE-2026-72958 | high | 8.2 | No | Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally. | 2026-09-21 |
| CVE-2026-72989 | high | 7.5 | No | Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network. | 2026-09-21 |
| CVE-2026-72961 | high | 8.2 | No | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 2026-09-21 |