Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103582 | not reported | — | No | Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client, package Apache.NMS.ActiveMQ)... | 2026-11-04 |
| CVE-2026-111822 | not reported | — | No | Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime configur... | 2026-11-04 |
| CVE-2026-111821 | not reported | — | No | Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subscription with a clientI... | 2026-11-04 |
| CVE-2026-121652 | medium | 5.4 | No | Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might allow remote authenticated users to inject arbitra... | 2026-11-04 |
| CVE-2026-91457 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supporte... | 2026-11-04 |
| CVE-2026-91458 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-91483 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-113941 | high | 7.1 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-113940 | medium | 5.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-113936 | medium | 5.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-112698 | medium | 5.5 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS... | 2026-11-04 |
| CVE-2026-112653 | medium | 4.3 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS... | 2026-11-04 |
| CVE-2026-112652 | medium | 5.5 | No | A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, m... | 2026-11-04 |
| CVE-2026-112467 | low | 3.3 | No | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypa... | 2026-11-04 |
| CVE-2026-112421 | medium | 4.7 | No | A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2... | 2026-11-04 |
| CVE-2026-102713 | not reported | — | No | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with packet chaining, the TFTP server does not bound the length... | 2026-11-04 |
| CVE-2026-119977 | high | 8.1 | Listed | WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging path... | 2026-11-04 |
| CVE-2026-119551 | medium | 6.5 | No | Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsController.GetSuggestions that allows authenticated non-a... | 2026-11-04 |
| CVE-2026-102712 | not reported | — | No | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with DTLS server support, the NetX Secure DTLS server's ClientH... | 2026-11-04 |
| CVE-2026-12859 | medium | 6.5 | No | Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly... | 2026-11-04 |