Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86698 | not reported | — | No | Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization membership or session... | 2026-09-22 |
| CVE-2026-81897 | medium | 5.4 | No | In Concrete CMS below CMS 9.5.3, the save_control action in the Express entities forms dashboard controller did not validate the anti-CSRF t... | 2026-09-22 |
| CVE-2026-81896 | medium | 5.4 | No | Concrete CMS before 9.5.3 does not apply HTML entity encoding to user-defined Form block question labels when rendering them as column heade... | 2026-09-22 |
| CVE-2026-81895 | high | 7.2 | No | In Concrete CMS before 9.5.3, the Document Library block stored the file-set identifiers submitted through fsID[] without validating them as... | 2026-09-22 |
| CVE-2026-81894 | medium | 5.4 | No | Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-site Scripting (XSS) via the Gallery block's per-image Caption field be... | 2026-09-22 |
| CVE-2026-73639 | critical | 9.1 | No | Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chun... | 2026-09-22 |
| CVE-2026-73638 | medium | 6.2 | No | Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd. tiff_load_ifd(... | 2026-09-22 |
| CVE-2026-69652 | high | 7.0 | No | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 2026-09-22 |
| CVE-2026-69654 | high | 7.0 | No | Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. | 2026-09-22 |
| CVE-2026-69674 | medium | 5.5 | No | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security fe... | 2026-09-22 |
| CVE-2026-69708 | high | 7.0 | No | Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally. | 2026-09-22 |
| CVE-2026-82992 | high | 7.8 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are... | 2026-09-22 |
| CVE-2026-83003 | high | 8.5 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |
| CVE-2026-83005 | high | 8.8 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |
| CVE-2026-83006 | critical | 9.1 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |
| CVE-2026-83007 | high | 8.5 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |
| CVE-2026-69710 | high | 7.5 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker t... | 2026-09-22 |
| CVE-2026-83008 | high | 8.8 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |
| CVE-2026-83009 | high | 8.8 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |
| CVE-2026-83010 | high | 8.1 | No | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions... | 2026-09-22 |