Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-34475 | critical | 9.8 | No | Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of /... | 2026-10-26 |
| CVE-2026-33765 | critical | 9.8 | No | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. Versions prio... | 2026-10-26 |
| CVE-2026-34387 | critical | 9.8 | No | Fleet is open source device management software. Prior to 4.81.1, a command injection vulnerability in Fleet's software installer pipeline a... | 2026-10-26 |
| CVE-2026-4619 | critical | 9.8 | No | Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network. | 2026-10-26 |
| CVE-2026-0578 | critical | 9.8 | No | A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality... | 2026-10-26 |
| CVE-2025-57231 | high | 7.5 | No | Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request... | 2026-10-26 |
| CVE-2026-32201 | medium | 6.5 | Listed | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 2026-10-26 |
| CVE-2026-34197 | high | 8.8 | Listed | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveM... | 2026-10-26 |
| CVE-2026-34486 | high | 7.5 | Listed | Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInte... | 2026-10-26 |
| CVE-2026-91627 | high | 7.8 | No | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported... | 2026-10-26 |
| CVE-2026-91625 | high | 8.2 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |
| CVE-2026-91623 | high | 7.4 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |
| CVE-2026-91622 | critical | 9.3 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |
| CVE-2026-91617 | medium | 5.5 | No | Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent).... | 2026-10-26 |
| CVE-2026-91616 | low | 3.7 | No | Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent).... | 2026-10-26 |
| CVE-2026-91615 | medium | 6.3 | No | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0... | 2026-10-26 |
| CVE-2026-91614 | low | 3.3 | No | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported ve... | 2026-10-26 |
| CVE-2026-91613 | low | 3.3 | No | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported ve... | 2026-10-26 |
| CVE-2026-91612 | low | 3.3 | No | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported ve... | 2026-10-26 |
| CVE-2026-91610 | high | 8.8 | No | Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable... | 2026-10-26 |