Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-60876 | medium | 4.2 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). The supported version tha... | 2026-10-27 |
| CVE-2026-60746 | medium | 5.9 | No | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions th... | 2026-10-27 |
| CVE-2026-60662 | high | 7.8 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily... | 2026-10-27 |
| CVE-2026-60453 | medium | 5.3 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4.... | 2026-10-27 |
| CVE-2026-47025 | high | 8.8 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4.... | 2026-10-27 |
| CVE-2026-91767 | medium | 6.5 | No | php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate... | 2026-10-27 |
| CVE-2026-52834 | high | 7.3 | No | jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform... | 2026-10-27 |
| CVE-2026-49255 | high | 8.8 | No | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm constructs operating sy... | 2026-10-27 |
| CVE-2026-49253 | high | 7.1 | No | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm uses remote-supplied fi... | 2026-10-27 |
| CVE-2026-45742 | high | 7.5 | No | Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext function in pkg/modules/api/context.go s... | 2026-10-27 |
| CVE-2026-45741 | high | 7.5 | No | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPublicIP function in pkg/gotenberg/outbound.go does... | 2026-10-27 |
| CVE-2026-44829 | high | 8.8 | No | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename handling in pkg/modules/api/context.go uses filep... | 2026-10-27 |
| CVE-2026-40509 | medium | 4.3 | No | OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The web_path GET parameter in the DICOM viewer... | 2026-10-27 |
| CVE-2026-40508 | medium | 5.4 | No | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenti... | 2026-10-27 |
| CVE-2026-40507 | medium | 6.1 | No | OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml... | 2026-10-27 |
| CVE-2026-18756 | not reported | — | No | HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in the Space membership-request workflow. An attacke... | 2026-10-27 |
| CVE-2026-16818 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consum... | 2026-10-27 |
| CVE-2026-16817 | high | 7.5 | No | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference. | 2026-10-27 |
| CVE-2026-76234 | high | 7.5 | No | libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not... | 2026-10-27 |
| CVE-2026-63937 | high | 8.8 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer... | 2026-10-27 |