Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-101584 medium 6.5 No Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket). Supported versions that are affec... 2026-10-29
CVE-2026-101583 high 7.0 No Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper). Supported versions that are affected ar... 2026-10-29
CVE-2026-101575 medium 6.5 No Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Dif... 2026-10-29
CVE-2026-101570 low 3.7 No Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected... 2026-10-29
CVE-2026-101524 medium 5.6 No Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). Supported... 2026-10-29
CVE-2026-101502 medium 5.0 No Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to explo... 2026-10-29
CVE-2026-101497 medium 4.3 No Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework). Supported versions that a... 2026-10-29
CVE-2026-101488 medium 6.5 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... 2026-10-29
CVE-2026-101474 medium 5.9 No Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... 2026-10-29
CVE-2026-101471 medium 6.1 No Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported versi... 2026-10-29
CVE-2026-101459 high 8.3 No Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... 2026-10-29
CVE-2026-101432 medium 5.3 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are... 2026-10-29
CVE-2026-101415 low 3.1 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that ar... 2026-10-29
CVE-2026-101412 medium 5.8 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that ar... 2026-10-29
CVE-2026-100175 medium 5.4 No The Postie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Body URL Autolink in all versions up to, and includin... 2026-10-29
CVE-2025-65200 critical 9.6 No An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL... 2026-10-29
CVE-2026-101407 medium 5.5 No Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant). Supported version... 2026-10-29
CVE-2026-101365 medium 4.7 No Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exp... 2026-10-29
CVE-2026-82411 medium 6.5 No Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token... 2026-10-28
CVE-2026-75520 medium 5.4 No Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, the `udevices` JSON com... 2026-10-28