Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118682 | high | 7.5 | No | KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing attackers to intercept... | 2026-10-28 |
| CVE-2026-118669 | not reported | — | No | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner... | 2026-10-28 |
| CVE-2026-0631 | high | 8.0 | No | An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AX... | 2026-10-28 |
| CVE-2023-54404 | high | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportio... | 2026-10-28 |
| CVE-2026-93631 | high | 7.1 | No | A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition allows an attacker to... | 2026-10-28 |
| CVE-2026-93633 | medium | 5.4 | No | A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access to publish a documen... | 2026-10-28 |
| CVE-2026-93634 | medium | 4.3 | No | A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert forged shared-file re... | 2026-10-28 |
| CVE-2026-91282 | medium | 5.9 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal SEC). Supported versions that are affect... | 2026-10-28 |
| CVE-2026-91281 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |
| CVE-2026-91280 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-10-28 |
| CVE-2026-91279 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-10-28 |
| CVE-2026-91278 | medium | 5.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91277 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported... | 2026-10-28 |
| CVE-2026-91276 | medium | 5.3 | No | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported... | 2026-10-28 |
| CVE-2026-91275 | medium | 6.6 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91274 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91272 | high | 7.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-28 |
| CVE-2026-91271 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91270 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-10-28 |
| CVE-2026-91269 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-28 |