Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-92936 | medium | 5.8 | No | vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied c... | 2026-09-17 |
| CVE-2026-92615 | medium | 6.6 | No | A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which... | 2026-09-17 |
| CVE-2026-92358 | medium | 6.4 | No | A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a tem... | 2026-09-17 |
| CVE-2026-91992 | medium | 5.9 | No | Tornado before 6.5.7 contains a credential leak vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without... | 2026-09-17 |
| CVE-2026-91982 | medium | 4.3 | No | Vikunja before 2.6.0 continues to expose the raw TOTP shared secret after enrollment through the GET /api/v1/user/settings/totp and /api/v1/... | 2026-09-17 |
| CVE-2026-91972 | high | 7.5 | No | Vikunja versions before 2.6.0 fail to apply rate limiting to /api/v2 public authentication endpoints including login, register, password-res... | 2026-09-17 |
| CVE-2026-91967 | medium | 5.0 | No | AVideo through 29.0 contains a blind server-side request forgery vulnerability in the getHeaderContentTypeFromURL function that issues get_h... | 2026-09-17 |
| CVE-2026-91849 | medium | 6.3 | No | A security flaw has been discovered in WuzhiCMS up to 4.1.0. This affects the function member::setAvatar of the file /index.php?m=member&f=u... | 2026-09-17 |
| CVE-2026-87264 | high | 7.7 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that... | 2026-09-17 |
| CVE-2026-87262 | high | 7.1 | No | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface... | 2026-09-17 |
| CVE-2026-87261 | high | 7.3 | No | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface... | 2026-09-17 |
| CVE-2026-87260 | high | 7.3 | No | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface... | 2026-09-17 |
| CVE-2026-87259 | high | 8.4 | No | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface... | 2026-09-17 |
| CVE-2026-84548 | high | 7.1 | No | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tah... | 2026-09-17 |
| CVE-2026-83233 | high | 7.7 | No | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma... | 2026-09-17 |
| CVE-2026-83231 | high | 7.0 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-dbclient-mongodb). Supported versions that are affected... | 2026-09-17 |
| CVE-2026-83230 | high | 7.1 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are... | 2026-09-17 |
| CVE-2026-83229 | critical | 9.1 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are... | 2026-09-17 |
| CVE-2026-83227 | high | 7.5 | No | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.... | 2026-09-17 |
| CVE-2026-83226 | high | 7.5 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-09-17 |