Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110613 | medium | 6.5 | No | youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's... | 2026-10-27 |
| CVE-2026-109564 | low | 3.1 | No | LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that skips the read-acce... | 2026-10-27 |
| CVE-2026-97028 | not reported | — | No | Rejected reason: Maintainers determined it is not a vulnerability. | 2026-10-27 |
| CVE-2026-90848 | medium | 4.3 | No | A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Hand... | 2026-10-26 |
| CVE-2026-82230 | high | 7.5 | No | Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the ser... | 2026-10-26 |
| CVE-2026-75029 | medium | 5.3 | No | In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RD... | 2026-10-26 |
| CVE-2026-19668 | medium | 5.3 | No | A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSE... | 2026-10-26 |
| CVE-2026-19033 | medium | 6.5 | No | For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final mes... | 2026-10-26 |
| CVE-2026-78301 | medium | 5.8 | No | A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as a zone cut. If an attacker inserts a malformed zo... | 2026-10-26 |
| CVE-2026-89092 | medium | 4.2 | No | The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a respo... | 2026-10-26 |
| CVE-2026-91633 | medium | 6.0 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-26 |
| CVE-2026-91632 | high | 7.7 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-26 |
| CVE-2026-91631 | medium | 5.0 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-26 |
| CVE-2026-91630 | medium | 6.8 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-26 |
| CVE-2026-91629 | medium | 4.7 | No | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported... | 2026-10-26 |
| CVE-2026-91628 | medium | 5.5 | No | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supporte... | 2026-10-26 |
| CVE-2026-77924 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-26 |
| CVE-2026-66045 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-26 |
| CVE-2026-66044 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-26 |
| CVE-2026-66043 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-26 |