Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83379 | high | 8.7 | No | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for... | 2026-10-27 |
| CVE-2026-116612 | high | 7.8 | No | A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can embed an arbitrary GStreamer pipeline descript... | 2026-10-27 |
| CVE-2026-110063 | critical | 10.0 | No | Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to... | 2026-10-27 |
| CVE-2026-107656 | critical | 9.8 | No | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 t... | 2026-10-27 |
| CVE-2026-101824 | high | 8.7 | No | Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions t... | 2026-10-27 |
| CVE-2026-101704 | high | 8.2 | No | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions that are affecte... | 2026-10-27 |
| CVE-2026-101700 | high | 8.1 | No | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are aff... | 2026-10-27 |
| CVE-2026-101684 | high | 8.3 | No | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations). Sup... | 2026-10-27 |
| CVE-2026-101672 | high | 8.1 | No | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions t... | 2026-10-27 |
| CVE-2026-101665 | high | 8.1 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affec... | 2026-10-27 |
| CVE-2026-101648 | high | 8.4 | No | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that... | 2026-10-27 |
| CVE-2026-111147 | medium | 6.1 | No | Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers... | 2026-10-27 |
| CVE-2026-110613 | medium | 6.5 | No | youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's... | 2026-10-27 |
| CVE-2026-109564 | low | 3.1 | No | LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that skips the read-acce... | 2026-10-27 |
| CVE-2026-97028 | not reported | — | No | Rejected reason: Maintainers determined it is not a vulnerability. | 2026-10-27 |
| CVE-2026-90848 | medium | 4.3 | No | A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Hand... | 2026-10-26 |
| CVE-2026-82230 | high | 7.5 | No | Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the ser... | 2026-10-26 |
| CVE-2026-75029 | medium | 5.3 | No | In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RD... | 2026-10-26 |
| CVE-2026-19668 | medium | 5.3 | No | A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSE... | 2026-10-26 |
| CVE-2026-19033 | medium | 6.5 | No | For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final mes... | 2026-10-26 |