Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-57195 | high | 7.5 | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-10-28 |
| CVE-2026-57198 | not reported | — | No | Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.... | 2026-10-28 |
| CVE-2026-57197 | not reported | — | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-10-28 |
| CVE-2026-57194 | medium | 5.9 | No | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified... | 2026-10-28 |
| CVE-2026-87363 | high | 7.5 | No | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affecte... | 2026-10-28 |
| CVE-2026-87362 | medium | 6.5 | No | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that i... | 2026-10-28 |
| CVE-2026-87361 | medium | 4.3 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is... | 2026-10-28 |
| CVE-2026-87360 | medium | 5.3 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-28 |
| CVE-2026-87359 | high | 8.8 | No | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2... | 2026-10-28 |
| CVE-2026-87358 | high | 7.1 | No | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are... | 2026-10-28 |
| CVE-2026-87357 | high | 7.2 | No | Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected... | 2026-10-28 |
| CVE-2026-87354 | medium | 4.3 | No | Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator). Supported versions that are affected are 22.1-22.1.40.... | 2026-10-28 |
| CVE-2026-87350 | medium | 4.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affec... | 2026-10-28 |
| CVE-2026-87348 | medium | 4.2 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported version... | 2026-10-28 |
| CVE-2026-87347 | critical | 9.6 | No | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). Supported versions that are affected a... | 2026-10-28 |
| CVE-2026-87345 | medium | 6.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... | 2026-10-28 |
| CVE-2026-68567 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Grids EasyTest – Simplify A/B Testi... | 2026-10-28 |
| CVE-2026-87344 | medium | 6.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). Supported versions that are affected... | 2026-10-28 |
| CVE-2026-87342 | medium | 6.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affec... | 2026-10-28 |
| CVE-2026-87330 | medium | 4.2 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported version... | 2026-10-28 |