Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91352 | medium | 5.3 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-22 |
| CVE-2026-91350 | high | 7.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-22 |
| CVE-2026-91349 | high | 7.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-22 |
| CVE-2026-89409 | not reported | — | No | In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing checks in the ZWAVE_C... | 2026-10-22 |
| CVE-2026-91345 | high | 7.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-22 |
| CVE-2026-91344 | high | 7.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-10-22 |
| CVE-2026-91332 | medium | 5.3 | No | Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.... | 2026-10-22 |
| CVE-2026-91255 | high | 7.5 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily ex... | 2026-10-22 |
| CVE-2026-91254 | high | 7.5 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily ex... | 2026-10-22 |
| CVE-2026-84920 | medium | 5.3 | No | Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node P... | 2026-10-22 |
| CVE-2026-82814 | high | 8.8 | No | The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17... | 2026-10-22 |
| CVE-2026-83400 | medium | 5.3 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).... | 2026-10-22 |
| CVE-2026-83395 | medium | 6.5 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network... | 2026-10-22 |
| CVE-2026-20218 | medium | 5.8 | No | A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenti... | 2026-10-22 |
| CVE-2026-16477 | not reported | — | No | CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file (editable screenshot annotations). Exploi... | 2026-10-22 |
| CVE-2026-15634 | medium | 6.5 | No | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTT... | 2026-10-22 |
| CVE-2026-15412 | medium | 6.5 | No | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 could allow a remote... | 2026-10-22 |
| CVE-2026-11722 | medium | 4.8 | No | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by an HT... | 2026-10-22 |
| CVE-2026-11549 | medium | 6.5 | No | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a vir... | 2026-10-22 |
| CVE-2026-11548 | medium | 4.8 | No | IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are affected by a... | 2026-10-22 |