Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-101628 medium 6.5 No Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). The supported version that is affected is 9.7... 2026-10-21
CVE-2026-101627 medium 4.4 No Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL... 2026-10-21
CVE-2026-101626 medium 5.9 No Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0.... 2026-10-21
CVE-2026-101625 medium 4.3 No Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0.... 2026-10-21
CVE-2026-101624 medium 4.9 No Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL... 2026-10-21
CVE-2026-101623 medium 4.9 No Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affecte... 2026-10-21
CVE-2026-101622 medium 4.9 No Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL... 2026-10-21
CVE-2026-101621 medium 4.9 No Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL... 2026-10-21
CVE-2026-101620 medium 6.5 No Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affecte... 2026-10-21
CVE-2026-101619 medium 4.9 No Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL... 2026-10-21
CVE-2026-101618 medium 4.9 No Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL... 2026-10-21
CVE-2026-101466 high 7.2 No Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions tha... 2026-10-21
CVE-2026-101380 medium 5.4 No Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vuln... 2026-10-21
CVE-2026-101378 medium 4.3 No Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vuln... 2026-10-21
CVE-2026-101377 low 2.7 No Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exp... 2026-10-21
CVE-2026-101376 medium 4.7 No Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exp... 2026-10-21
CVE-2026-101375 medium 6.3 No Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exp... 2026-10-21
CVE-2026-101374 medium 5.9 No Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Diffic... 2026-10-21
CVE-2026-101373 low 2.4 No Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vul... 2026-10-21
CVE-2026-70295 medium 5.5 No Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. 2026-10-21