Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84860 | high | 8.8 | No | ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authorization Bypass Spring Security gates DWR endpoints by URL path pattern, bu... | 2026-09-18 |
| CVE-2026-84859 | medium | 6.5 | No | ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection The /api/events/search endpoint accepts a JSON... | 2026-09-18 |
| CVE-2026-84858 | high | 8.8 | No | ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSo... | 2026-09-18 |
| CVE-2026-81901 | high | 8.7 | No | In Concrete CMS 9.2.0 through 9.5.2, the REST API page update endpoint (PUT /ccm/api/1.0/pages/{cID}) did not enforce page-property, page-te... | 2026-09-18 |
| CVE-2026-92619 | high | 7.2 | No | The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 via the `wpbc_a... | 2026-09-18 |
| CVE-2026-92473 | low | 3.3 | No | A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src/scenegraph/commands... | 2026-09-18 |
| CVE-2026-92413 | medium | 4.3 | No | A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_op... | 2026-09-18 |
| CVE-2026-87152 | high | 8.1 | No | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are... | 2026-09-18 |
| CVE-2026-87125 | high | 8.3 | No | Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Supported versi... | 2026-09-18 |
| CVE-2026-83477 | high | 8.1 | No | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches). Supported versions that are affecte... | 2026-09-18 |
| CVE-2026-83446 | high | 8.1 | No | Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions... | 2026-09-18 |
| CVE-2026-83418 | high | 8.2 | No | Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEP... | 2026-09-18 |
| CVE-2026-83310 | high | 8.7 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected... | 2026-09-18 |
| CVE-2026-83307 | high | 8.3 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected... | 2026-09-18 |
| CVE-2026-83304 | high | 8.9 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Support... | 2026-09-18 |
| CVE-2026-83297 | high | 8.1 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected... | 2026-09-18 |
| CVE-2026-83285 | high | 8.3 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported versi... | 2026-09-18 |
| CVE-2026-83278 | medium | 6.8 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-neo4j). Supported versions that are affect... | 2026-09-18 |
| CVE-2026-83264 | high | 8.4 | No | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported versi... | 2026-09-18 |
| CVE-2026-83220 | high | 8.1 | No | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe). Supported versions that a... | 2026-09-18 |