Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-83372 medium 5.4 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affecte... 2026-10-27
CVE-2026-98148 medium 5.5 No In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supported rotations The... 2026-10-27
CVE-2026-70869 medium 4.7 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that... 2026-10-27
CVE-2026-60968 medium 6.0 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported version... 2026-10-27
CVE-2026-60964 low 1.9 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). Supported versions that are aff... 2026-10-27
CVE-2026-60887 low 3.8 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). Supported versions that are aff... 2026-10-27
CVE-2026-60885 medium 6.8 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). Supported versions that... 2026-10-27
CVE-2026-60882 medium 5.3 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). Supported versions that a... 2026-10-27
CVE-2026-60878 medium 4.4 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that... 2026-10-27
CVE-2026-60869 medium 6.8 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets). Supported versions t... 2026-10-27
CVE-2026-60839 medium 5.5 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected... 2026-10-27
CVE-2026-103555 high 7.0 No Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. 2026-10-27
CVE-2026-103575 high 8.8 No Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 2026-10-27
CVE-2026-103576 medium 6.5 No Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perfo... 2026-10-27
CVE-2026-103577 high 7.5 No Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network. 2026-10-27
CVE-2026-105003 high 7.8 No Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. 2026-10-27
CVE-2026-116674 medium 6.5 No systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, O... 2026-10-27
CVE-2026-109431 high 8.1 No Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resourc... 2026-10-27
CVE-2026-87694 high 7.8 No Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 2026-10-27
CVE-2026-87695 high 7.8 No Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges lo... 2026-10-27