Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-119673 | low | 2.8 | No | MongoDB Database Tools mongofiles does not resolve existing parent-directory symlinks when validating output paths for get_regex. An unautho... | 2026-11-03 |
| CVE-2026-119672 | medium | 4.8 | No | MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for get_id when --local is not specified.... | 2026-11-03 |
| CVE-2026-87160 | high | 7.1 | No | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af... | 2026-11-03 |
| CVE-2026-87159 | high | 8.1 | No | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af... | 2026-11-03 |
| CVE-2026-87152 | high | 8.1 | No | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are... | 2026-11-03 |
| CVE-2026-87126 | high | 7.1 | No | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Reports Security). Supported versions that are aff... | 2026-11-03 |
| CVE-2026-83130 | high | 7.1 | No | Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affect... | 2026-11-03 |
| CVE-2026-83129 | high | 7.7 | No | Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected... | 2026-11-03 |
| CVE-2026-87161 | high | 8.5 | No | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af... | 2026-11-03 |
| CVE-2026-99261 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for userq per-vm BOs evicti... | 2026-11-03 |
| CVE-2026-99260 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags When setting spar... | 2026-11-03 |
| CVE-2026-91896 | low | 3.9 | No | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability. A low privile... | 2026-11-03 |
| CVE-2026-92294 | medium | 6.5 | No | The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file deletion due to insuf... | 2026-11-03 |
| CVE-2026-89229 | not reported | — | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai... | 2026-11-03 |
| CVE-2026-85035 | high | 8.8 | No | The can_add_rx_filter_msgq() system call installs a CAN RX filter whose callback (can_msgq_put() in drivers/can/can_common.c) is handed the... | 2026-11-03 |
| CVE-2026-85034 | medium | 6.7 | No | The Bluetooth host's GATT client passed the value of a received Handle Value Notification, Handle Value Indication or Multiple Handle Value... | 2026-11-03 |
| CVE-2026-85033 | medium | 4.6 | No | The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit state in a per-connection object... | 2026-11-03 |
| CVE-2026-85032 | medium | 4.8 | No | The MCTP over USB device class in subsys/pmci/mctp/mctp_usb.c splits RX handling across two threads: the system workqueue runs mctp_usb_clas... | 2026-11-03 |
| CVE-2026-84634 | medium | 6.3 | No | A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A... | 2026-11-03 |
| CVE-2026-84614 | medium | 4.6 | No | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An attacker wit... | 2026-11-03 |