Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-75034 | high | 7.4 | No | A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed asserti... | 2026-11-03 |
| CVE-2026-73755 | medium | 5.7 | No | A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privileg... | 2026-11-03 |
| CVE-2026-70805 | high | 8.1 | No | Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite (component: Change Management). Supported versio... | 2026-11-03 |
| CVE-2026-71312 | high | 8.0 | No | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone inter... | 2026-11-03 |
| CVE-2026-70611 | medium | 6.9 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and... | 2026-11-03 |
| CVE-2026-70603 | medium | 6.0 | No | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and... | 2026-11-03 |
| CVE-2026-70482 | high | 8.8 | No | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHA... | 2026-11-03 |
| CVE-2026-70075 | medium | 4.4 | No | Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to by... | 2026-11-03 |
| CVE-2026-65643 | high | 8.8 | No | Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root. | 2026-11-03 |
| CVE-2026-63500 | high | 7.1 | No | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/sc... | 2026-11-03 |
| CVE-2026-63482 | high | 7.5 | No | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI re... | 2026-11-03 |
| CVE-2026-63434 | medium | 4.3 | No | MyTube is a self-hosted downloader and player for several video websites. Prior to 1.10.6, when statisticsEnabled and statisticsTrackVisitor... | 2026-11-03 |
| CVE-2026-63418 | high | 7.0 | No | Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, check_icmp stores the number of hosts supp... | 2026-11-03 |
| CVE-2026-64945 | high | 7.5 | No | A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question operation controller gates hide/show opera... | 2026-11-03 |
| CVE-2026-64944 | medium | 5.4 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer. This issue affects Apa... | 2026-11-03 |
| CVE-2026-63694 | medium | 5.0 | No | Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Com... | 2026-11-03 |
| CVE-2026-61511 | critical | 9.8 | No | vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method wi... | 2026-11-03 |
| CVE-2026-61325 | high | 7.6 | No | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). The supported version tha... | 2026-11-03 |
| CVE-2026-61189 | medium | 6.5 | No | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version tha... | 2026-11-03 |
| CVE-2026-62196 | high | 8.3 | No | OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated send... | 2026-11-03 |