Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-55186 | medium | 4.2 | No | Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged... | 2026-11-03 |
| CVE-2026-54161 | high | 8.1 | No | Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. F... | 2026-11-03 |
| CVE-2026-50573 | high | 8.1 | No | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, `pnpm install` in non-frozen mode can accept new remote package content after detect... | 2026-11-03 |
| CVE-2026-52811 | not reported | — | No | Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoFiles checks for symlinks only on the leaf of the u... | 2026-11-03 |
| CVE-2026-52809 | medium | 6.8 | No | Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated using conf.Auth.ActivateCodeLives (the... | 2026-11-03 |
| CVE-2026-52805 | high | 8.7 | No | Gogs is an open source self-hosted Git service. Prior to 0.14.3, a Server-Side Request Forgery (SSRF) vulnerability exists in the repository... | 2026-11-03 |
| CVE-2026-52804 | not reported | — | No | Gogs is an open source self-hosted Git service. Prior to 0.14.3, a repository admin collaborator can escalate their privileges to owner-leve... | 2026-11-03 |
| CVE-2026-54130 | high | 7.5 | No | Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network. | 2026-11-03 |
| CVE-2026-50447 | critical | 9.8 | No | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 2026-11-03 |
| CVE-2026-50377 | high | 7.8 | No | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-11-03 |
| CVE-2026-50354 | high | 7.1 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-11-03 |
| CVE-2026-50021 | high | 8.1 | No | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's tarball extraction worker skips integrity verification when the integrity fie... | 2026-11-03 |
| CVE-2026-50014 | high | 7.3 | No | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm passes the lockfile-controlled git resolution.commit value to git fetch without... | 2026-11-03 |
| CVE-2026-49845 | critical | 9.8 | No | SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users... | 2026-11-03 |
| CVE-2026-47026 | high | 7.4 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). Supported versions t... | 2026-11-03 |
| CVE-2026-47015 | high | 7.1 | No | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). The supported version... | 2026-11-03 |
| CVE-2026-48946 | medium | 6.3 | No | The K2 frontend article-attachment upload path accepts files whose extension is `.php`, and Apache's standard mod_php matches `\.php$` and e... | 2026-11-03 |
| CVE-2026-49278 | medium | 6.7 | No | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.6, 7.13.8... | 2026-11-03 |
| CVE-2026-48613 | medium | 5.9 | No | SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration,... | 2026-11-03 |
| CVE-2026-47009 | medium | 6.5 | No | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that i... | 2026-11-03 |