Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83129 | high | 7.7 | No | Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected... | 2026-11-03 |
| CVE-2026-87161 | high | 8.5 | No | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are af... | 2026-11-03 |
| CVE-2026-99261 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for userq per-vm BOs evicti... | 2026-11-03 |
| CVE-2026-99260 | not reported | — | No | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags When setting spar... | 2026-11-03 |
| CVE-2026-91896 | low | 3.9 | No | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability. A low privile... | 2026-11-03 |
| CVE-2026-92294 | medium | 6.5 | No | The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file deletion due to insuf... | 2026-11-03 |
| CVE-2026-89229 | not reported | — | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai... | 2026-11-03 |
| CVE-2026-85035 | high | 8.8 | No | The can_add_rx_filter_msgq() system call installs a CAN RX filter whose callback (can_msgq_put() in drivers/can/can_common.c) is handed the... | 2026-11-03 |
| CVE-2026-85034 | medium | 6.7 | No | The Bluetooth host's GATT client passed the value of a received Handle Value Notification, Handle Value Indication or Multiple Handle Value... | 2026-11-03 |
| CVE-2026-85033 | medium | 4.6 | No | The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit state in a per-connection object... | 2026-11-03 |
| CVE-2026-85032 | medium | 4.8 | No | The MCTP over USB device class in subsys/pmci/mctp/mctp_usb.c splits RX handling across two threads: the system workqueue runs mctp_usb_clas... | 2026-11-03 |
| CVE-2026-84634 | medium | 6.3 | No | A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A... | 2026-11-03 |
| CVE-2026-84614 | medium | 4.6 | No | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An attacker wit... | 2026-11-03 |
| CVE-2026-82976 | high | 7.1 | No | A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack. The controller registers an HTTP f... | 2026-11-03 |
| CVE-2026-73328 | high | 7.2 | No | Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to uploa... | 2026-11-03 |
| CVE-2026-65168 | high | 7.0 | No | NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code. | 2026-11-03 |
| CVE-2026-65165 | medium | 5.3 | No | NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary opt... | 2026-11-03 |
| CVE-2026-65140 | medium | 5.7 | No | NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained toget... | 2026-11-03 |
| CVE-2026-77778 | high | 7.1 | No | ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to thei... | 2026-11-03 |
| CVE-2026-65363 | high | 8.4 | No | The issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 2... | 2026-11-03 |