Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83219 | high | 7.1 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-18 |
| CVE-2026-83218 | high | 7.4 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-18 |
| CVE-2026-83177 | high | 8.1 | No | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are af... | 2026-09-18 |
| CVE-2026-83174 | high | 8.1 | No | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Application Framework). Supported versio... | 2026-09-18 |
| CVE-2026-83152 | high | 8.1 | No | Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-09-18 |
| CVE-2026-83146 | high | 7.7 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-09-18 |
| CVE-2026-83145 | high | 8.7 | No | Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions... | 2026-09-18 |
| CVE-2026-83144 | high | 8.7 | No | Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions... | 2026-09-18 |
| CVE-2026-83143 | high | 8.1 | No | Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected... | 2026-09-18 |
| CVE-2026-93468 | high | 7.5 | No | The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Travers... | 2026-09-18 |
| CVE-2026-93467 | critical | 9.8 | No | The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on... | 2026-09-18 |
| CVE-2026-90891 | medium | 5.5 | No | ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attac... | 2026-09-18 |
| CVE-2026-90890 | medium | 5.5 | No | ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local... | 2026-09-18 |
| CVE-2026-89180 | high | 7.5 | No | EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbi... | 2026-09-18 |
| CVE-2026-93534 | medium | 6.3 | No | A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdate... | 2026-09-18 |
| CVE-2026-93531 | medium | 4.3 | No | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects... | 2026-09-18 |
| CVE-2026-93505 | low | 3.5 | No | A vulnerability was found in SveltyCMS 0.0.6. This vulnerability affects unknown code of the file src/utils/media/media-service.server.ts of... | 2026-09-18 |
| CVE-2026-19515 | high | 7.0 | No | The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator project... | 2026-09-18 |
| CVE-2025-5802 | medium | 5.3 | No | The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. Whe... | 2026-09-18 |
| CVE-2026-4103 | medium | 6.4 | No | Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user input to be rendered without proper encodi... | 2026-09-18 |