Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118669 | not reported | — | No | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner... | 2026-10-28 |
| CVE-2026-118538 | medium | 5.5 | No | A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0... | 2026-10-28 |
| CVE-2026-118537 | medium | 4.3 | No | A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catalog/components/Image.... | 2026-10-28 |
| CVE-2026-116641 | medium | 6.8 | No | The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However, the crypto/x509... | 2026-10-28 |
| CVE-2026-0631 | high | 8.0 | No | An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AX... | 2026-10-28 |
| CVE-2023-54404 | high | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportio... | 2026-10-28 |
| CVE-2026-93631 | high | 7.1 | No | A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition allows an attacker to... | 2026-10-28 |
| CVE-2026-93633 | medium | 5.4 | No | A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access to publish a documen... | 2026-10-28 |
| CVE-2026-93634 | medium | 4.3 | No | A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert forged shared-file re... | 2026-10-28 |
| CVE-2026-91282 | medium | 5.9 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal SEC). Supported versions that are affect... | 2026-10-28 |
| CVE-2026-91281 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-91280 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-10-28 |
| CVE-2026-91279 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-10-28 |
| CVE-2026-91278 | medium | 5.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91277 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported... | 2026-10-28 |
| CVE-2026-91276 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported... | 2026-10-28 |
| CVE-2026-91275 | medium | 6.6 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91274 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91272 | high | 7.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-28 |
| CVE-2026-91271 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |