Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-98141 medium 5.5 No In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data()... 2026-10-27
CVE-2026-60819 low 3.7 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported version... 2026-10-27
CVE-2026-101388 high 7.1 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affecte... 2026-10-27
CVE-2026-101389 medium 5.9 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... 2026-10-27
CVE-2026-101390 high 8.1 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... 2026-10-27
CVE-2024-14042 medium 6.3 No A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr_cb of the file src/... 2026-10-27
CVE-2024-6541 medium 6.8 No The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This a... 2026-10-27
CVE-2024-39024 high 8.8 No In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution. 2026-10-27
CVE-2024-8995 medium 4.9 No Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persis... 2026-10-27
CVE-2024-6832 high 7.5 No The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent stat... 2026-10-27
CVE-2024-10302 medium 5.8 No The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalid... 2026-10-27
CVE-2026-64239 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() DAMON... 2026-10-27
CVE-2026-64236 medium 5.5 No In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the... 2026-10-27
CVE-2024-51316 high 7.5 No The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the update_dev_name function of the file /goform/SetOnlineDevNa... 2026-10-27
CVE-2024-51315 critical 9.8 No The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName 2026-10-27
CVE-2024-51314 critical 9.8 No The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/setMacFilterCfg. 2026-10-27
CVE-2024-51312 critical 9.8 No The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/SetStaticRouteCfg. 2026-10-27
CVE-2024-51313 critical 9.8 No The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg. 2026-10-27
CVE-2024-51311 critical 9.8 No The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/SetNetControlList. 2026-10-27
CVE-2024-58370 medium 6.5 No SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and at... 2026-10-27