Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-75887 | high | 7.5 | No | A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng`... | 2026-10-23 |
| CVE-2026-75885 | critical | 9.3 | No | A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remo... | 2026-10-23 |
| CVE-2026-108334 | high | 7.4 | No | A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines wh... | 2026-10-23 |
| CVE-2026-96376 | medium | 6.4 | No | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command I... | 2026-10-23 |
| CVE-2026-96355 | critical | 9.1 | No | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affe... | 2026-10-23 |
| CVE-2026-91478 | high | 8.8 | No | Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supporte... | 2026-10-23 |
| CVE-2026-115253 | not reported | — | No | An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative us... | 2026-10-23 |
| CVE-2026-91398 | medium | 6.8 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network... | 2026-10-23 |
| CVE-2026-91397 | low | 3.6 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Service... | 2026-10-23 |
| CVE-2026-91394 | medium | 5.9 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are a... | 2026-10-23 |
| CVE-2026-113727 | high | 7.4 | No | OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route... | 2026-10-23 |
| CVE-2026-101403 | medium | 5.9 | No | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected... | 2026-10-23 |
| CVE-2026-101402 | low | 3.7 | No | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected... | 2026-10-23 |
| CVE-2026-101401 | low | 2.9 | No | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 1... | 2026-10-23 |
| CVE-2026-101400 | low | 2.9 | No | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 1... | 2026-10-23 |
| CVE-2026-101398 | high | 7.6 | No | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affect... | 2026-10-23 |
| CVE-2016-20100 | high | 7.5 | No | Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to... | 2026-10-23 |
| CVE-2014-125134 | high | 7.5 | No | ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary... | 2026-10-23 |
| CVE-2012-20004 | medium | 6.1 | No | K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in... | 2026-10-23 |
| CVE-2026-113722 | high | 7.8 | No | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an inc... | 2026-10-23 |