Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106458 | medium | 6.5 | No | Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbuck... | 2026-10-27 |
| CVE-2026-106460 | medium | 6.8 | No | Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-auth-node package di... | 2026-10-27 |
| CVE-2026-83794 | medium | 5.5 | No | Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. | 2026-10-27 |
| CVE-2026-83795 | high | 7.5 | No | Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. | 2026-10-27 |
| CVE-2026-83796 | high | 7.8 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83797 | high | 8.8 | No | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. | 2026-10-27 |
| CVE-2026-83798 | medium | 5.5 | No | Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. | 2026-10-27 |
| CVE-2026-106433 | high | 8.8 | No | Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a... | 2026-10-27 |
| CVE-2026-87308 | high | 7.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-27 |
| CVE-2026-87307 | high | 7.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-27 |
| CVE-2026-87306 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-27 |
| CVE-2026-87305 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-27 |
| CVE-2026-87304 | high | 8.6 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-10-27 |
| CVE-2026-87303 | medium | 5.9 | No | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.... | 2026-10-27 |
| CVE-2026-87301 | high | 8.4 | No | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.... | 2026-10-27 |
| CVE-2026-87300 | high | 8.7 | No | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for... | 2026-10-27 |
| CVE-2026-87299 | medium | 6.1 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-27 |
| CVE-2026-87298 | medium | 6.5 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-10-27 |
| CVE-2026-87290 | medium | 5.9 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).... | 2026-10-27 |
| CVE-2026-110910 | low | 3.7 | No | ### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even though keys are encoded... | 2026-10-27 |