Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101810 | high | 7.5 | No | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Ea... | 2026-10-22 |
| CVE-2026-10841 | medium | 4.8 | No | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTT... | 2026-10-22 |
| CVE-2026-101720 | medium | 5.3 | No | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that a... | 2026-10-22 |
| CVE-2026-101695 | medium | 6.8 | No | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are af... | 2026-10-22 |
| CVE-2026-101679 | high | 7.5 | No | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected... | 2026-10-22 |
| CVE-2026-101587 | medium | 5.3 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1). Supported versions that are affected... | 2026-10-22 |
| CVE-2026-101581 | medium | 6.5 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin). Supported versions... | 2026-10-22 |
| CVE-2026-101572 | high | 7.5 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected... | 2026-10-22 |
| CVE-2026-101569 | medium | 6.5 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits). Supported versions that are... | 2026-10-22 |
| CVE-2026-101520 | high | 7.5 | No | Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Instal... | 2026-10-22 |
| CVE-2026-101399 | medium | 5.3 | No | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 1... | 2026-10-22 |
| CVE-2026-101394 | medium | 5.3 | No | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 1... | 2026-10-22 |
| CVE-2026-101359 | medium | 5.3 | No | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vul... | 2026-10-22 |
| CVE-2026-96912 | high | 7.8 | No | Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-96911 | high | 7.8 | No | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevat... | 2026-10-22 |
| CVE-2026-96914 | high | 8.8 | No | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges lo... | 2026-10-22 |
| CVE-2026-96913 | high | 7.8 | No | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-83661 | high | 7.8 | No | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the contex... | 2026-10-22 |
| CVE-2026-93909 | critical | 9.1 | No | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2... | 2026-10-22 |
| CVE-2026-93905 | high | 8.2 | No | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persiste... | 2026-10-22 |