Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106554 | not reported | — | No | One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tags drives quadratic-time TagList growth (CPU/... | 2026-11-04 |
| CVE-2026-105296 | medium | 5.4 | No | Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, uninte... | 2026-11-04 |
| CVE-2026-107176 | medium | 6.8 | No | A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, an... | 2026-11-04 |
| CVE-2026-104799 | high | 8.8 | No | The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2 via the `wcfmmp_pr... | 2026-11-04 |
| CVE-2026-100302 | not reported | — | No | Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash... | 2026-11-04 |
| CVE-2026-100300 | not reported | — | No | Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper... | 2026-11-04 |
| CVE-2026-116252 | medium | 6.5 | No | pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value... | 2026-11-04 |
| CVE-2026-116251 | medium | 5.4 | No | pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own change password dialog or... | 2026-11-04 |
| CVE-2026-90631 | low | 3.3 | No | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a doc... | 2026-11-04 |
| CVE-2026-90632 | medium | 5.5 | No | Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia c... | 2026-11-04 |
| CVE-2026-91392 | low | 3.7 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |
| CVE-2026-91393 | low | 3.1 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |
| CVE-2026-91414 | medium | 5.3 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-11-04 |
| CVE-2026-91420 | medium | 6.5 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-11-04 |
| CVE-2026-91421 | medium | 5.9 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-11-04 |
| CVE-2026-91422 | medium | 5.3 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-11-04 |
| CVE-2026-91423 | medium | 6.0 | No | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affe... | 2026-11-04 |
| CVE-2026-116880 | high | 7.1 | No | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the... | 2026-11-04 |
| CVE-2026-116881 | medium | 6.1 | No | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject markup by storing m... | 2026-11-04 |
| CVE-2026-112474 | high | 7.8 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.... | 2026-11-04 |