Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-96442 | high | 7.8 | No | A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would e... | 2026-10-27 |
| CVE-2026-91668 | high | 8.8 | No | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that... | 2026-10-27 |
| CVE-2026-91662 | medium | 6.4 | No | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vu... | 2026-10-27 |
| CVE-2026-91661 | high | 7.7 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91660 | medium | 4.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91659 | high | 7.7 | No | Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability a... | 2026-10-27 |
| CVE-2026-91657 | medium | 4.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91656 | critical | 9.1 | No | Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable... | 2026-10-27 |
| CVE-2026-71195 | critical | 9.9 | No | In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API con... | 2026-10-27 |
| CVE-2026-6893 | high | 7.5 | No | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dy... | 2026-10-27 |
| CVE-2026-114118 | medium | 4.8 | No | Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction without first checking tha... | 2026-10-27 |
| CVE-2026-114113 | not reported | — | No | Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2... | 2026-10-27 |
| CVE-2026-114108 | critical | 9.8 | No | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access t... | 2026-10-27 |
| CVE-2026-114103 | medium | 5.3 | No | adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the maxOutputLength guard by targeting the asyn... | 2026-10-27 |
| CVE-2026-114098 | high | 7.8 | No | Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to write arbitrary files ou... | 2026-10-27 |
| CVE-2026-114093 | medium | 4.3 | No | Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out authenticated users by... | 2026-10-27 |
| CVE-2026-114088 | medium | 6.5 | No | Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows unauthenticat... | 2026-10-27 |
| CVE-2026-114083 | high | 8.1 | No | Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that allows authent... | 2026-10-27 |
| CVE-2026-114078 | high | 8.1 | No | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTaskScheduleService that... | 2026-10-27 |
| CVE-2026-114073 | medium | 5.5 | No | Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret values in debug deplo... | 2026-10-27 |