Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91665 | critical | 9.8 | No | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerabilit... | 2026-10-22 |
| CVE-2026-76466 | critical | 9.8 | No | A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network acce... | 2026-10-22 |
| CVE-2026-76462 | medium | 5.5 | No | A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an... | 2026-10-22 |
| CVE-2026-113019 | high | 8.8 | No | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi... | 2026-10-22 |
| CVE-2026-101590 | critical | 9.1 | No | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are aff... | 2026-10-22 |
| CVE-2026-101521 | critical | 9.8 | No | Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4... | 2026-10-22 |
| CVE-2026-101484 | critical | 9.8 | No | Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. E... | 2026-10-22 |
| CVE-2026-96960 | high | 7.5 | No | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-22 |
| CVE-2026-96959 | high | 7.5 | No | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-22 |
| CVE-2026-96958 | high | 7.5 | No | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-22 |
| CVE-2026-96957 | high | 8.8 | No | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-22 |
| CVE-2026-96238 | medium | 6.5 | No | Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-22 |
| CVE-2026-96237 | high | 7.5 | No | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. | 2026-10-22 |
| CVE-2026-96235 | high | 8.8 | No | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. | 2026-10-22 |
| CVE-2026-96234 | medium | 5.3 | No | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. | 2026-10-22 |
| CVE-2026-96233 | high | 7.5 | No | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-22 |
| CVE-2026-96232 | high | 7.5 | No | Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. | 2026-10-22 |
| CVE-2026-96231 | high | 7.8 | No | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-22 |
| CVE-2026-96230 | high | 8.8 | No | Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to exec... | 2026-10-22 |
| CVE-2026-96229 | medium | 6.5 | No | Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. | 2026-10-22 |