Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-69741 | medium | 5.5 | No | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | 2026-09-22 |
| CVE-2026-87266 | high | 8.2 | No | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected... | 2026-09-22 |
| CVE-2026-87130 | high | 7.4 | No | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... | 2026-09-22 |
| CVE-2026-87129 | critical | 9.1 | No | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported... | 2026-09-22 |
| CVE-2026-77122 | medium | 4.3 | No | An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Rep... | 2026-09-22 |
| CVE-2026-77123 | medium | 6.5 | No | Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabi... | 2026-09-22 |
| CVE-2026-77124 | high | 7.2 | No | In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether s... | 2026-09-22 |
| CVE-2026-87190 | high | 7.5 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-87191 | high | 7.1 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-87219 | high | 8.4 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-87220 | high | 7.1 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-77125 | high | 7.1 | No | A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly e... | 2026-09-22 |
| CVE-2026-87221 | high | 7.5 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-87222 | high | 7.5 | No | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is af... | 2026-09-22 |
| CVE-2026-93967 | medium | 5.5 | No | A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this issue is the function generate_host_task of the file backend/aiops... | 2026-09-22 |
| CVE-2026-93962 | high | 8.3 | No | A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file s... | 2026-09-22 |
| CVE-2026-93957 | medium | 4.3 | No | A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file sr... | 2026-09-22 |
| CVE-2026-92385 | low | 2.4 | No | A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /a... | 2026-09-22 |
| CVE-2026-89040 | critical | 9.8 | No | Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gai... | 2026-09-22 |
| CVE-2026-76819 | not reported | — | No | Rejected reason: Further research determined the issue results from a dependency. | 2026-09-22 |