Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-105008 critical 9.0 No No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. 2026-10-27
CVE-2026-102675 high 7.4 No Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, an... 2026-10-27
CVE-2026-76473 critical 9.8 No As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim... 2026-10-27
CVE-2026-18330 not reported — No A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same RSA-1024 private key is stored within fir... 2026-10-27
CVE-2026-14255 medium 5.5 No A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malici... 2026-10-27
CVE-2026-111054 not reported — No Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-112374. Reason: This candidate is a duplicate of CVE-20... 2026-10-27
CVE-2026-60814 low 3.9 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... 2026-10-27
CVE-2026-98141 medium 5.5 No In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data()... 2026-10-27
CVE-2026-60819 low 3.7 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported version... 2026-10-27
CVE-2026-101388 high 7.1 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affecte... 2026-10-27
CVE-2026-101389 medium 5.9 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... 2026-10-27
CVE-2026-101390 high 8.1 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... 2026-10-27
CVE-2024-14042 medium 6.3 No A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr_cb of the file src/... 2026-10-27
CVE-2024-6541 medium 6.8 No The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This a... 2026-10-27
CVE-2024-39024 high 8.8 No In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution. 2026-10-27
CVE-2024-8995 medium 4.9 No Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persis... 2026-10-27
CVE-2024-6832 high 7.5 No The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent stat... 2026-10-27
CVE-2024-10302 medium 5.8 No The user self-signup flow in multiple WSO2 products fails to adequately validate user-supplied input. This weakness allows arbitrary unvalid... 2026-10-27
CVE-2026-64239 high 7.8 No In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() DAMON... 2026-10-27
CVE-2026-64236 medium 5.5 No In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the... 2026-10-27