Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101601 | medium | 5.5 | No | Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are affected are 21.3-21.23. Easily exploitabl... | 2026-10-21 |
| CVE-2026-101600 | low | 3.6 | No | Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 26.1-26.1.1.3.0. Di... | 2026-10-21 |
| CVE-2026-101599 | high | 7.5 | No | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.... | 2026-10-21 |
| CVE-2026-101598 | high | 7.8 | No | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.... | 2026-10-21 |
| CVE-2026-101595 | medium | 5.4 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supply Chain Relations... | 2026-10-21 |
| CVE-2026-101592 | medium | 5.4 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-21 |
| CVE-2026-101591 | medium | 4.3 | No | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage... | 2026-10-21 |
| CVE-2026-101589 | medium | 5.3 | No | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported... | 2026-10-21 |
| CVE-2026-101588 | medium | 5.3 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.... | 2026-10-21 |
| CVE-2026-101586 | medium | 5.3 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient). Supported versions that are affected are 4.... | 2026-10-21 |
| CVE-2026-101585 | high | 7.2 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 3.0.0-3... | 2026-10-21 |
| CVE-2026-101582 | medium | 5.8 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault). Supported versions that are affect... | 2026-10-21 |
| CVE-2026-101580 | medium | 5.8 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-jwt). Supported versions that are af... | 2026-10-21 |
| CVE-2026-101579 | high | 7.2 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server). Supported versions that are affected are... | 2026-10-21 |
| CVE-2026-85683 | high | 8.8 | No | The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, which is reachable by... | 2026-10-21 |
| CVE-2026-14556 | medium | 5.4 | No | The HappyForms WordPress plugin before 1.26.15 does not sanitise or escape a user-controlled referral value before embedding it in the form... | 2026-10-21 |
| CVE-2026-107447 | medium | 5.3 | No | The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor identity used to enforce its one-vote-per-entry re... | 2026-10-21 |
| CVE-2026-105256 | medium | 5.3 | No | The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking ag... | 2026-10-21 |
| CVE-2026-104642 | low | 2.7 | No | The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set,... | 2026-10-21 |
| CVE-2026-104641 | medium | 5.3 | No | The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment notification is for a payment received by the s... | 2026-10-21 |