Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111478 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-28 |
| CVE-2026-0631 | high | 8.0 | No | An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AX... | 2026-10-28 |
| CVE-2023-54404 | high | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportio... | 2026-10-28 |
| CVE-2026-93631 | high | 7.1 | No | A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition allows an attacker to... | 2026-10-28 |
| CVE-2026-93633 | medium | 5.4 | No | A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access to publish a documen... | 2026-10-28 |
| CVE-2026-93634 | medium | 4.3 | No | A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert forged shared-file re... | 2026-10-28 |
| CVE-2026-91264 | low | 3.7 | No | Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that... | 2026-10-28 |
| CVE-2026-91263 | medium | 4.9 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). Supported versi... | 2026-10-28 |
| CVE-2026-91260 | high | 7.2 | No | Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are aff... | 2026-10-28 |
| CVE-2026-91257 | medium | 6.5 | No | Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.... | 2026-10-28 |
| CVE-2026-70354 | high | 7.8 | No | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-77468 | not reported | — | No | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes the Scramble-generated OpenAPI documentation conf... | 2026-10-28 |
| CVE-2026-70341 | high | 8.8 | No | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | 2026-10-28 |
| CVE-2026-66798 | medium | 4.3 | No | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 2026-10-28 |
| CVE-2026-66324 | medium | 6.5 | No | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 2026-10-28 |
| CVE-2026-66323 | medium | 5.4 | No | Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code... | 2026-10-28 |
| CVE-2026-62904 | medium | 5.4 | No | Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | 2026-10-28 |
| CVE-2026-62898 | high | 7.5 | No | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 2026-10-28 |
| CVE-2026-62871 | high | 7.8 | No | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-61702 | medium | 5.3 | No | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_banner() in sched... | 2026-10-28 |