Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91557 | high | 7.0 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported v... | 2026-10-26 |
| CVE-2026-91555 | medium | 6.1 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0... | 2026-10-26 |
| CVE-2026-91554 | medium | 6.5 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). The supported version that is affected is 12.2... | 2026-10-26 |
| CVE-2026-91553 | medium | 4.4 | No | Vulnerability in the PeopleSoft Enterprise FIN Product Configurator Brazil product of Oracle PeopleSoft (component: Product Configurator). T... | 2026-10-26 |
| CVE-2026-91550 | high | 8.8 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |
| CVE-2026-91549 | high | 7.8 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported ve... | 2026-10-26 |
| CVE-2026-91547 | medium | 5.5 | No | Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21... | 2026-10-26 |
| CVE-2026-91546 | high | 8.1 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported v... | 2026-10-26 |
| CVE-2026-91545 | high | 7.8 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported v... | 2026-10-26 |
| CVE-2026-91539 | high | 7.8 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). The sup... | 2026-10-26 |
| CVE-2026-91536 | medium | 5.0 | No | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected ar... | 2026-10-26 |
| CVE-2026-91535 | high | 8.8 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions... | 2026-10-26 |
| CVE-2026-91534 | high | 8.6 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Support... | 2026-10-26 |
| CVE-2026-91530 | medium | 4.4 | No | Vulnerability in Oracle GoldenGate (component: Admin Client Executable). Supported versions that are affected are 23.4-23.26.2.0.0. Difficul... | 2026-10-26 |
| CVE-2026-91528 | medium | 4.3 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). The supported version that is affect... | 2026-10-26 |
| CVE-2026-77216 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-26 |
| CVE-2026-77215 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-26 |
| CVE-2026-28850 | medium | 5.5 | No | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.8, visionOS 27. An app may be a... | 2026-10-26 |
| CVE-2026-109556 | high | 8.0 | No | EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a s... | 2026-10-26 |
| CVE-2026-109427 | medium | 6.5 | No | Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allows authenticated token holders to access... | 2026-10-26 |