Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111756 | not reported | — | No | follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16... | 2026-10-23 |
| CVE-2026-112949 | medium | 4.7 | No | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0.3, an unauthenticat... | 2026-10-23 |
| CVE-2026-96303 | medium | 6.5 | No | Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over... | 2026-10-22 |
| CVE-2026-96251 | high | 8.8 | No | Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network. | 2026-10-22 |
| CVE-2026-93888 | high | 7.8 | No | IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection... | 2026-10-22 |
| CVE-2026-91665 | critical | 9.8 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-22 |
| CVE-2026-76496 | high | 7.0 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c... | 2026-10-22 |
| CVE-2026-76495 | high | 7.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c... | 2026-10-22 |
| CVE-2026-76494 | high | 7.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c... | 2026-10-22 |
| CVE-2026-76479 | high | 7.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim... | 2026-10-22 |
| CVE-2026-76478 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim... | 2026-10-22 |
| CVE-2026-76477 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim... | 2026-10-22 |
| CVE-2026-76476 | high | 8.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim... | 2026-10-22 |
| CVE-2026-76474 | critical | 9.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim... | 2026-10-22 |
| CVE-2026-76466 | critical | 9.8 | No | A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network acce... | 2026-10-22 |
| CVE-2026-76462 | medium | 5.5 | No | A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an... | 2026-10-22 |
| CVE-2026-20291 | high | 7.8 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering te... | 2026-10-22 |
| CVE-2026-113019 | high | 8.8 | No | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi... | 2026-10-22 |
| CVE-2026-101590 | critical | 9.1 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are aff... | 2026-10-22 |
| CVE-2026-101521 | critical | 9.8 | No | Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4... | 2026-10-22 |