Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83419 | medium | 5.4 | No | Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEP... | 2026-09-22 |
| CVE-2026-83417 | high | 7.1 | No | Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEP... | 2026-09-22 |
| CVE-2026-83356 | high | 7.7 | No | Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite (component: Security). The supported version tha... | 2026-09-22 |
| CVE-2026-83354 | medium | 6.3 | No | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.... | 2026-09-22 |
| CVE-2026-83352 | high | 7.1 | No | Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12... | 2026-09-22 |
| CVE-2026-83308 | high | 8.1 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected... | 2026-09-22 |
| CVE-2026-83302 | high | 8.5 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). The supported version that is affec... | 2026-09-22 |
| CVE-2026-83300 | high | 7.1 | No | Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12... | 2026-09-22 |
| CVE-2026-83287 | high | 7.7 | No | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). Support... | 2026-09-22 |
| CVE-2026-83277 | high | 7.3 | No | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is a... | 2026-09-22 |
| CVE-2026-69693 | high | 7.0 | No | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. | 2026-09-22 |
| CVE-2026-72929 | high | 7.8 | No | Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-09-22 |
| CVE-2026-90990 | not reported | — | No | Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 allows an authenticat... | 2026-09-22 |
| CVE-2026-83305 | high | 8.6 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected... | 2026-09-22 |
| CVE-2026-83303 | high | 8.5 | No | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected... | 2026-09-22 |
| CVE-2026-83115 | high | 7.5 | No | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versio... | 2026-09-22 |
| CVE-2026-77523 | high | 7.4 | No | MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the model parameter form route authorizes the path w... | 2026-09-22 |
| CVE-2026-77521 | critical | 10.0 | No | MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, MCP tool, skill, or sub-applicatio... | 2026-09-22 |
| CVE-2026-77518 | medium | 5.0 | No | MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal workspace user who knows another user's active MCP... | 2026-09-22 |
| CVE-2026-77517 | medium | 5.4 | No | MaxKB is an open-source AI assistant for enterprise. From version 2.0.0 through 2.10.2-lts, document and paragraph operate routes authorize... | 2026-09-22 |