Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85254 | medium | 6.5 | No | Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 be... | 2026-11-03 |
| CVE-2026-85257 | medium | 5.3 | No | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel:... | 2026-11-03 |
| CVE-2026-109242 | high | 7.1 | No | FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current b... | 2026-11-03 |
| CVE-2026-109241 | low | 3.1 | No | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious server... | 2026-11-03 |
| CVE-2026-109240 | low | 3.1 | No | FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash c... | 2026-11-03 |
| CVE-2026-85260 | medium | 5.5 | No | Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0... | 2026-11-03 |
| CVE-2026-85296 | medium | 6.5 | No | Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4... | 2026-11-03 |
| CVE-2026-85312 | medium | 4.8 | No | Improper Input Validation vulnerability in Apache Camel Core component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.1... | 2026-11-03 |
| CVE-2026-85313 | medium | 4.3 | No | Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component. This issue affects Apache Camel: from... | 2026-11-03 |
| CVE-2026-85314 | medium | 6.5 | No | Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.1... | 2026-11-03 |
| CVE-2026-85315 | medium | 5.3 | No | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue affects Apache Camel:... | 2026-11-03 |
| CVE-2026-85316 | medium | 4.8 | No | Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0... | 2026-11-03 |
| CVE-2026-85317 | medium | 4.8 | No | Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 bef... | 2026-11-03 |
| CVE-2026-88900 | high | 8.8 | No | Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before... | 2026-11-03 |
| CVE-2026-73954 | high | 8.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... | 2026-11-03 |
| CVE-2026-73955 | high | 7.3 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting). Supported versions that are affec... | 2026-11-03 |
| CVE-2026-73960 | high | 7.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server). Supported versions that are aff... | 2026-11-03 |
| CVE-2026-82993 | high | 8.5 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that... | 2026-11-03 |
| CVE-2026-113351 | high | 7.5 | No | libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offse... | 2026-11-03 |
| CVE-2026-87264 | high | 7.7 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that... | 2026-11-03 |