Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91527 | high | 8.8 | No | Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is... | 2026-10-26 |
| CVE-2026-91526 | medium | 4.7 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0... | 2026-10-26 |
| CVE-2026-91524 | medium | 4.3 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported v... | 2026-10-26 |
| CVE-2026-91523 | medium | 5.4 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Support... | 2026-10-26 |
| CVE-2026-91521 | high | 8.8 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |
| CVE-2026-91520 | high | 8.8 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |
| CVE-2026-91518 | medium | 5.4 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affecte... | 2026-10-26 |
| CVE-2026-91517 | high | 8.0 | No | Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin). Supported versions th... | 2026-10-26 |
| CVE-2026-91515 | high | 7.5 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |
| CVE-2026-91514 | medium | 6.5 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0... | 2026-10-26 |
| CVE-2026-91512 | high | 7.2 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-26 |
| CVE-2026-69798 | high | 7.8 | No | Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-69830 | high | 8.1 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized at... | 2026-10-26 |
| CVE-2026-69840 | high | 7.0 | No | Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. | 2026-10-26 |
| CVE-2026-81509 | medium | 6.1 | No | nforwardauth is a forward auth service that allows the use of a single authentication middleware for multiple sites. Versions prior to 1.5.1... | 2026-10-26 |
| CVE-2026-78846 | critical | 9.8 | No | Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing. | 2026-10-26 |
| CVE-2026-50096 | medium | 6.1 | No | There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthen... | 2026-10-26 |
| CVE-2026-50095 | medium | 6.1 | No | There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows... | 2026-10-26 |
| CVE-2026-33522 | medium | 5.3 | No | Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for... | 2026-10-26 |
| CVE-2026-33521 | high | 7.5 | No | There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may allow a remote, unauthenticated attacker t... | 2026-10-26 |