by Kastro CVE-2026-109618 · PHP Group PHP
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
4,742 matching vulnerabilities · Page 8 of 95
PHP Group
D-Link
Tenda
HKUDS
OpenStack
PHPOffice
triggerdotdev
Apache Software Foundation
CVE-2026-105944 · Apache Software Foundation Apache Pulsar Manager
Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life
CVE-2026-105869 · Apache Software Foundation Apache Pulsar
Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user role
GStreamer
Cisco
CVE-2026-76473 · Cisco Cisco Emergency Responder
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
CVE-2026-76474 · Cisco Cisco Emergency Responder
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
CVE-2026-76466 · Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
Cisco Expressway Series Remote Code Execution Vulnerability
CVE-2026-20043 · Cisco Cisco Cyber Vision
Multiple Cisco Products Snort 3 Software Hardening Release: October 2026
CVE-2026-76475 · Cisco Cisco Emergency Responder
Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
IBM
CVE-2026-92559 · IBM App Connect Enterprise
IBM App Connect Enterprise is vulnerable to a credential exposure
CVE-2026-81212 · IBM DataStage on Cloud Pak for Data
DataStage on Cloud Pak for Data Improper Authorization
Oracle Corporation
CVE-2026-91299 · Oracle Corporation JD Edwards EnterpriseOne Orchestrator
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).
CVE-2026-91323 · Oracle Corporation Oracle WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
CVE-2026-91665 · Oracle Corporation Oracle Essbase
Vulnerability in Oracle Essbase (component: Security).
CVE-2026-91495 · Oracle Corporation Oracle WebCenter Content
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).
CVE-2026-91638 · Oracle Corporation Oracle Essbase
Vulnerability in Oracle Essbase (component: Security).
CVE-2026-91250 · Oracle Corporation Oracle SOA Suite
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).
CVE-2026-91251 · Oracle Corporation Oracle SOA Suite
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).
CVE-2026-91265 · Oracle Corporation JD Edwards EnterpriseOne Tools
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).
CVE-2026-91305 · Oracle Corporation JD Edwards EnterpriseOne Tools
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).
CVE-2026-91408 · Oracle Corporation Oracle Identity Manager
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service).
CVE-2026-91491 · Oracle Corporation Oracle Identity Manager Connector
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).
CVE-2026-91637 · Oracle Corporation Oracle Essbase
Vulnerability in Oracle Essbase (component: Security).
CVE-2026-91658 · Oracle Corporation Oracle Essbase
Vulnerability in Oracle Essbase (component: Security).
CVE-2026-91663 · Oracle Corporation Oracle Essbase
Vulnerability in Oracle Essbase (component: Security).
CVE-2026-91243 · Oracle Corporation Oracle Business Process Management Suite
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer).
CVE-2026-91341 · Oracle Corporation Oracle Outside In Technology
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
CVE-2026-91354 · Oracle Corporation Oracle Outside In Technology
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK).
CVE-2026-91490 · Oracle Corporation Oracle Identity Manager Connector
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).
CVE-2026-91622 · Oracle Corporation Oracle Agile Product Lifecycle Management for Process
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Man…
CVE-2026-91624 · Oracle Corporation Oracle Agile Product Lifecycle Management for Process
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Man…
CVE-2026-91644 · Oracle Corporation Oracle Essbase
Vulnerability in Oracle Essbase (component: Security).
CVE-2026-91655 · Oracle Corporation Oracle Essbase
Vulnerability in Oracle Essbase (component: Security).
CVE-2026-91656 · Oracle Corporation Oracle Essbase
Vulnerability in Oracle Essbase (component: Federated Partitions).
Best Practice Software
CVE-2026-114119 · Best Practice Software Bp Premier
Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential
WP Mailster
Kitae Park
vllm-project
uselagoon
LocalAI
WPdreams
CVE-2026-111852 · WPdreams Ajax Search Lite
WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability
MikroTik
Acronis
CVE-2026-87095 · Acronis Acronis Cyber Infrastructure