Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2024-2961 | high | 7.3 | No | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converti... | 2026-11-04 |
| CVE-2026-86984 | medium | 5.5 | No | A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in mac... | 2026-11-04 |
| CVE-2026-86985 | medium | 6.5 | No | This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPad... | 2026-11-04 |
| CVE-2026-86986 | high | 7.5 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS... | 2026-11-04 |
| CVE-2026-91391 | low | 3.7 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |
| CVE-2026-86989 | medium | 5.1 | No | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadO... | 2026-11-04 |
| CVE-2026-86991 | high | 7.5 | No | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2... | 2026-11-04 |
| CVE-2026-86992 | high | 7.5 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS... | 2026-11-04 |
| CVE-2026-116878 | high | 7.5 | No | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to fo... | 2026-11-04 |
| CVE-2026-91412 | medium | 6.5 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |
| CVE-2026-56084 | medium | 5.3 | No | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re... | 2026-11-04 |
| CVE-2026-91413 | medium | 6.0 | No | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are a... | 2026-11-04 |
| CVE-2026-91428 | medium | 4.3 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |
| CVE-2026-91430 | medium | 6.5 | No | Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that... | 2026-11-04 |
| CVE-2026-91431 | medium | 5.5 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |
| CVE-2026-118776 | medium | 5.3 | No | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementa... | 2026-11-04 |
| CVE-2026-118777 | medium | 6.5 | No | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client s... | 2026-11-04 |
| CVE-2026-91432 | medium | 6.5 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |
| CVE-2026-91433 | high | 7.2 | No | Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer). Supported versions that are affecte... | 2026-11-04 |
| CVE-2023-23314 | high | 8.8 | No | An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted... | 2026-11-04 |