Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113811 | high | 7.5 | No | Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search... | 2026-10-30 |
| CVE-2026-113799 | medium | 5.3 | No | Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slac... | 2026-10-30 |
| CVE-2026-114463 | high | 7.5 | No | The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-... | 2026-10-30 |
| CVE-2026-114462 | not reported | — | No | Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before... | 2026-10-30 |
| CVE-2026-112408 | high | 8.1 | No | Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 a... | 2026-10-30 |
| CVE-2026-110799 | critical | 9.8 | No | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.7, the passwo... | 2026-10-30 |
| CVE-2026-10843 | high | 7.2 | No | A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS. Operator credentials are provisioned with accoun... | 2026-10-30 |
| CVE-2026-103039 | critical | 9.8 | No | The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom F... | 2026-10-30 |
| CVE-2025-70102 | medium | 6.3 | No | A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parse_option() (... | 2026-10-30 |
| CVE-2024-6423 | medium | 4.0 | No | The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data to be passed to flows... | 2026-10-30 |
| CVE-2026-76291 | high | 8.8 | No | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_search capability could... | 2026-10-30 |
| CVE-2026-76292 | medium | 6.5 | No | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.7... | 2026-10-30 |
| CVE-2026-101432 | medium | 5.3 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are... | 2026-10-30 |
| CVE-2026-101415 | low | 3.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that ar... | 2026-10-30 |
| CVE-2026-76293 | high | 7.2 | No | In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could... | 2026-10-30 |
| CVE-2026-76294 | medium | 4.3 | No | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could... | 2026-10-30 |
| CVE-2026-76295 | medium | 4.3 | No | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.7... | 2026-10-30 |
| CVE-2026-76296 | medium | 4.3 | No | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could... | 2026-10-30 |
| CVE-2026-76297 | medium | 5.4 | No | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with t... | 2026-10-30 |
| CVE-2026-76298 | high | 8.8 | No | In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles could derive the Postgre... | 2026-10-30 |