Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87704 | high | 7.0 | No | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-101487 | medium | 5.4 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affecte... | 2026-10-28 |
| CVE-2026-87705 | high | 7.4 | No | Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature o... | 2026-10-28 |
| CVE-2026-87706 | high | 7.8 | No | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 2026-10-28 |
| CVE-2026-101731 | medium | 4.9 | No | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affecte... | 2026-10-28 |
| CVE-2026-101732 | medium | 4.9 | No | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affecte... | 2026-10-28 |
| CVE-2026-93639 | high | 8.7 | No | A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no explicit administrative g... | 2026-10-28 |
| CVE-2026-9659 | critical | 9.1 | No | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X... | 2026-10-28 |
| CVE-2026-93630 | medium | 4.3 | No | A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender... | 2026-10-28 |
| CVE-2026-93629 | medium | 5.3 | No | An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to insert calendar invi... | 2026-10-28 |
| CVE-2026-93628 | medium | 5.3 | No | An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated send... | 2026-10-28 |
| CVE-2026-93627 | medium | 5.3 | No | An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sen... | 2026-10-28 |
| CVE-2026-91314 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91313 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91312 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91311 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91310 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are... | 2026-10-28 |
| CVE-2026-91309 | medium | 5.9 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-28 |
| CVE-2026-91308 | high | 7.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |
| CVE-2026-91307 | high | 7.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-10-28 |