Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116192 | medium | 5.9 | No | rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http a... | 2026-10-27 |
| CVE-2026-116191 | high | 7.5 | No | Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served... | 2026-10-27 |
| CVE-2026-15723 | high | 8.2 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 th... | 2026-10-27 |
| CVE-2026-12664 | medium | 6.8 | No | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 th... | 2026-10-27 |
| CVE-2026-102231 | high | 7.7 | No | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 2026-10-27 |
| CVE-2026-100753 | medium | 6.1 | No | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “... | 2026-10-27 |
| CVE-2026-101108 | critical | 9.8 | No | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_... | 2026-10-27 |
| CVE-2026-101109 | medium | 6.1 | No | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=vi... | 2026-10-27 |
| CVE-2026-63938 | critical | 9.3 | No | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the actual size of the buff... | 2026-10-27 |
| CVE-2026-91646 | medium | 5.6 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerabil... | 2026-10-27 |
| CVE-2026-91645 | medium | 5.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91644 | critical | 9.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91643 | medium | 5.3 | No | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vuln... | 2026-10-27 |
| CVE-2026-91642 | high | 7.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91641 | medium | 5.0 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91640 | medium | 5.0 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91639 | high | 7.7 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91636 | high | 7.7 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-91634 | medium | 5.3 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-27 |
| CVE-2026-83367 | high | 7.4 | No | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are... | 2026-10-27 |