Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91366 | medium | 4.7 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-04 |
| CVE-2026-91365 | medium | 5.9 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-04 |
| CVE-2026-91364 | medium | 6.8 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-04 |
| CVE-2026-91075 | medium | 5.3 | No | The Eupago Gateway For Woocommerce WordPress plugin from 4.5.0 through 4.7.5 does not verify the authenticity of incoming payment-confirmati... | 2026-11-04 |
| CVE-2026-77799 | high | 7.4 | No | ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid cre... | 2026-11-04 |
| CVE-2026-86943 | high | 7.5 | No | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause... | 2026-11-04 |
| CVE-2026-76955 | high | 8.8 | No | A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based att... | 2026-11-04 |
| CVE-2026-58968 | critical | 9.8 | No | In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of pri... | 2026-11-04 |
| CVE-2026-65350 | high | 7.1 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPad... | 2026-11-04 |
| CVE-2026-91363 | low | 3.7 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-04 |
| CVE-2026-58961 | high | 8.4 | No | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the code... | 2026-11-04 |
| CVE-2026-58936 | critical | 9.8 | No | In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no... | 2026-11-04 |
| CVE-2026-58876 | critical | 9.8 | No | In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no add... | 2026-11-04 |
| CVE-2026-91362 | medium | 5.3 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-04 |
| CVE-2026-121047 | high | 8.8 | No | Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-11-04 |
| CVE-2026-121037 | critical | 9.6 | No | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrar... | 2026-11-04 |
| CVE-2026-118391 | not reported | — | No | Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust... | 2026-11-04 |
| CVE-2026-114408 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handl... | 2026-11-04 |
| CVE-2026-113942 | high | 7.1 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-113915 | medium | 4.7 | No | A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, ma... | 2026-11-04 |