Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112255 | not reported | — | No | Initialization of a resource with an insecure default vulnerability in OpenText Advanced Authentication Server allows Excessive Allocation.... | 2026-10-29 |
| CVE-2026-101421 | high | 7.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected a... | 2026-10-29 |
| CVE-2026-101772 | high | 8.1 | No | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected... | 2026-10-29 |
| CVE-2026-115795 | not reported | — | No | P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next block in DCP Set and... | 2026-10-29 |
| CVE-2026-115794 | not reported | — | No | P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a received RTA alarm f... | 2026-10-29 |
| CVE-2026-115793 | not reported | — | No | P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or object UUID, and does no... | 2026-10-29 |
| CVE-2026-112200 | not reported | — | No | P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejected because its data r... | 2026-10-29 |
| CVE-2026-111736 | not reported | — | No | P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request without a valid target AR... | 2026-10-29 |
| CVE-2026-111735 | not reported | — | No | P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame while the consumer is in... | 2026-10-29 |
| CVE-2026-111734 | not reported | — | No | P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherType, any VLAN tags an... | 2026-10-29 |
| CVE-2026-111733 | not reported | — | No | P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID for a record index t... | 2026-10-29 |
| CVE-2026-111732 | not reported | — | No | P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVendorBlock request tha... | 2026-10-29 |
| CVE-2026-111731 | not reported | — | No | P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The lo... | 2026-10-29 |
| CVE-2026-111730 | not reported | — | No | P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The received length (up to 2... | 2026-10-29 |
| CVE-2026-101773 | high | 7.1 | No | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions t... | 2026-10-29 |
| CVE-2026-90871 | medium | 5.3 | No | Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wi... | 2026-10-29 |
| CVE-2026-90870 | medium | 5.3 | No | A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.... | 2026-10-29 |
| CVE-2026-90869 | high | 7.5 | No | A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software WS_FTP Serve... | 2026-10-29 |
| CVE-2026-90862 | medium | 4.3 | No | Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou... | 2026-10-29 |
| CVE-2026-84294 | high | 7.7 | No | Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3... | 2026-10-29 |