Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91660 | medium | 4.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91659 | high | 7.7 | No | Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability a... | 2026-10-27 |
| CVE-2026-91657 | medium | 4.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91656 | critical | 9.1 | No | Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable... | 2026-10-27 |
| CVE-2026-71195 | critical | 9.9 | No | In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API con... | 2026-10-27 |
| CVE-2026-6893 | high | 7.5 | No | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dy... | 2026-10-27 |
| CVE-2026-114118 | medium | 4.8 | No | Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction without first checking tha... | 2026-10-27 |
| CVE-2026-114113 | not reported | — | No | Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2... | 2026-10-27 |
| CVE-2026-114108 | critical | 9.8 | No | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access t... | 2026-10-27 |
| CVE-2026-114103 | medium | 5.3 | No | adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the maxOutputLength guard by targeting the asyn... | 2026-10-27 |
| CVE-2026-114098 | high | 7.8 | No | Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to write arbitrary files ou... | 2026-10-27 |
| CVE-2026-114093 | medium | 4.3 | No | Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out authenticated users by... | 2026-10-27 |
| CVE-2026-114088 | medium | 6.5 | No | Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows unauthenticat... | 2026-10-27 |
| CVE-2026-114083 | high | 8.1 | No | Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that allows authent... | 2026-10-27 |
| CVE-2026-114078 | high | 8.1 | No | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTaskScheduleService that... | 2026-10-27 |
| CVE-2026-114073 | medium | 5.5 | No | Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret values in debug deplo... | 2026-10-27 |
| CVE-2026-114068 | high | 8.3 | No | Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows authenticated attac... | 2026-10-27 |
| CVE-2026-114063 | high | 7.5 | No | SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows... | 2026-10-27 |
| CVE-2026-114058 | medium | 4.3 | No | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets authenticated user... | 2026-10-27 |
| CVE-2026-113743 | medium | 6.3 | No | A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the... | 2026-10-27 |