Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91306 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-91307 | high | 7.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-91308 | high | 7.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-88082 | high | 7.0 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-91309 | medium | 5.9 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-11-02 |
| CVE-2026-91310 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are... | 2026-11-02 |
| CVE-2026-91311 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-91312 | medium | 6.5 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-88083 | high | 7.5 | No | Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | 2026-11-02 |
| CVE-2026-91314 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-114722 | medium | 6.5 | No | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() d... | 2026-11-02 |
| CVE-2026-88085 | medium | 6.4 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-91313 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-88089 | medium | 6.7 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | 2026-11-02 |
| CVE-2026-114723 | medium | 5.3 | No | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. Wh... | 2026-11-02 |
| CVE-2026-93850 | medium | 6.5 | No | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of text extracted from... | 2026-11-02 |
| CVE-2026-93849 | medium | 6.5 | No | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail to apply allocation limits to... | 2026-11-02 |
| CVE-2026-93848 | low | 2.7 | No | Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpoint request which al... | 2026-11-02 |
| CVE-2026-91315 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-13411 | medium | 4.3 | No | Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated... | 2026-11-02 |