Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-107637 | medium | 4.3 | No | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper authorization vulnerability in the note module delete() action that al... | 2026-10-08 |
| CVE-2026-105832 | medium | 4.3 | No | EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requir... | 2026-10-08 |
| CVE-2026-18156 | medium | 6.5 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forg... | 2026-10-08 |
| CVE-2026-18154 | high | 7.5 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use of... | 2026-10-08 |
| CVE-2026-18153 | high | 7.1 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and... | 2026-10-08 |
| CVE-2026-18152 | high | 7.5 | No | IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper... | 2026-10-08 |
| CVE-2026-106218 | critical | 10.0 | No | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | 2026-10-08 |
| CVE-2026-106219 | high | 7.5 | No | In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server | 2026-10-08 |
| CVE-2026-87150 | high | 8.8 | No | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are a... | 2026-10-08 |
| CVE-2026-20519 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-10-08 |
| CVE-2026-87151 | high | 7.7 | No | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are a... | 2026-10-08 |
| CVE-2026-20520 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-10-08 |
| CVE-2026-20543 | medium | 5.5 | No | In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additiona... | 2026-10-08 |
| CVE-2026-83482 | high | 7.2 | No | Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affec... | 2026-10-08 |
| CVE-2026-54472 | high | 7.5 | No | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unau... | 2026-10-08 |
| CVE-2026-11795 | medium | 5.3 | No | Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue... | 2026-10-08 |
| CVE-2026-61421 | critical | 9.8 | No | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization... | 2026-10-08 |
| CVE-2026-63688 | critical | 10.0 | No | Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in th... | 2026-10-08 |
| CVE-2026-106210 | low | 3.1 | No | Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted... | 2026-10-08 |
| CVE-2026-106211 | critical | 9.6 | No | Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially ex... | 2026-10-08 |