Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91389 | medium | 5.4 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |
| CVE-2026-97045 | medium | 6.1 | No | In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found... | 2026-11-04 |
| CVE-2026-86983 | medium | 5.9 | No | A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its lengt... | 2026-11-04 |
| CVE-2026-78661 | high | 7.5 | No | When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data +... | 2026-11-04 |
| CVE-2026-76938 | critical | 9.8 | No | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Ma... | 2026-11-04 |
| CVE-2026-76937 | critical | 9.4 | No | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3... | 2026-11-04 |
| CVE-2026-76935 | critical | 9.4 | No | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System... | 2026-11-04 |
| CVE-2026-76934 | critical | 9.8 | No | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System... | 2026-11-04 |
| CVE-2026-22063 | not reported | — | No | The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certif... | 2026-11-04 |
| CVE-2026-65151 | high | 8.4 | No | NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerabi... | 2026-11-04 |
| CVE-2026-65145 | critical | 10.0 | No | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lea... | 2026-11-04 |
| CVE-2026-65120 | high | 7.1 | No | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulne... | 2026-11-04 |
| CVE-2026-65119 | high | 8.4 | No | NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusi... | 2026-11-04 |
| CVE-2026-24269 | high | 7.1 | No | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulne... | 2026-11-04 |
| CVE-2026-121926 | high | 7.3 | No | A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected is the function WebMvcConfig.... | 2026-11-04 |
| CVE-2026-119776 | not reported | — | No | In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementation does not check that OSPFv3 packets have a link-local sourc... | 2026-11-04 |
| CVE-2026-120567 | medium | 5.4 | No | The MongoDB Entity Framework Core provider does not neutralize special elements in values passed to SetProperty when an ExecuteUpdate call a... | 2026-11-04 |
| CVE-2026-13162 | not reported | — | No | An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system command... | 2026-11-04 |
| CVE-2026-118180 | high | 7.5 | No | When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it.... | 2026-11-04 |
| CVE-2026-118179 | high | 8.8 | No | Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and port given in the lin... | 2026-11-04 |