By publication date

Exploited and new serious CVEs: October 2026

8,745 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 63 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-91448No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Oct 20, 2026
29Monitor	CVE-2026-91449No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-306 Pre-auth Auth bypass	High7.4	—	0.2%	Oct 20, 2026
29Monitor	CVE-2026-91450No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-306 Pre-auth Auth bypass	High7.4	—	0.3%	Oct 20, 2026
31Monitor	CVE-2026-91457No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).oracle · outside in technology · CWE-20	High7.8	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-91458No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).oracle · outside in technology · CWE-20	High7.8	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-91459No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).oracle · outside in technology · CWE-502 Deserialization	High7.8	—	0.2%	Oct 20, 2026
31Monitor	CVE-2026-91460No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).oracle · outside in technology · CWE-502 Deserialization	High7.8	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-91465No exploit	Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration).oracle corporation · peoplesoft enterprise fin common objects argentina · CWE-200 Pre-auth Info leak	High7.5	—	0.3%	Oct 20, 2026
31Monitor	CVE-2026-91473No exploit	Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).oracle corporation · oracle http server · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
35Monitor	CVE-2026-91478No exploit	Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing).oracle corporation · peoplesoft enterprise scm strategic sourcing · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Oct 20, 2026
31Monitor	CVE-2026-91483No exploit	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).oracle · outside in technology · CWE-502 Deserialization	High7.8	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-91484No exploit	Vulnerability in Oracle Java SE (component: Java plugin).oracle corporation · oracle java se · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.5	—	0.1%	Oct 20, 2026
28Monitor	CVE-2026-91488No exploit	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST).oracle · identity manager connector · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.1	—	0.1%	Oct 20, 2026
28Monitor	CVE-2026-91489No exploit	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).oracle · identity manager connector · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.1	—	0.1%	Oct 20, 2026
36Monitor	CVE-2026-91490No exploit	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).oracle · identity manager connector · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.3%	Oct 20, 2026
39Monitor	CVE-2026-91491No exploit	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).oracle · identity manager connector · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.3%	Oct 20, 2026
34Monitor	CVE-2026-91492No exploit	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+).oracle · identity manager connector · CWE-284 Pre-auth Broken access control (IDOR)	High8.7	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-91493No exploit	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).oracle · identity manager connector · CWE-287 Pre-auth Auth bypass	High7.5	—	0.3%	Oct 20, 2026
29Monitor	CVE-2026-91494No exploit	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).oracle · identity manager connector · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
39Monitor	CVE-2026-91495No exploit	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).oracle · webcenter content · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-91496No exploit	Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).oracle corporation · workflow · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-91499No exploit	Vulnerability in the RDBMS component of Oracle Database Server.oracle corporation · oracle database server · CWE-269	High8.8	—	0.3%	Oct 20, 2026
29Monitor	CVE-2026-91502No exploit	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).oracle corporation · oracle weblogic server · CWE-306 Pre-auth Auth bypass	High7.3	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-91503No exploit	Vulnerability in the VPD component of Oracle Database Server.oracle corporation · oracle database server · CWE-284 Broken access control (IDOR)	High8.1	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-91504No exploit	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite).oracle · webcenter content · CWE-284 Broken access control (IDOR)	High7.5	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-91506No exploit	Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).oracle corporation · workflow · CWE-306 Pre-auth Auth bypass	High8.1	—	0.2%	Oct 20, 2026
28Monitor	CVE-2026-91511No exploit	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).oracle · purchasing · CWE-284 Broken access control (IDOR)	High7.1	—	0.2%	Oct 20, 2026
28Monitor	CVE-2026-91512No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Broken access control (IDOR)	High7.2	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-91515No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-306 Auth bypass	High7.5	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-91517No exploit	Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin).oracle corporation · oracle management pack for oracle goldengate · CWE-284 Pre-auth Broken access control (IDOR)	High8.0	—	0.1%	Oct 20, 2026
35Monitor	CVE-2026-91520No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-91521No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-306 Auth bypass	High8.8	—	0.2%	Oct 20, 2026
35Monitor	CVE-2026-91527No exploit	Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).oracle corporation · oracle zfs storage appliance kit · CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Oct 20, 2026
35Monitor	CVE-2026-91532No exploit	Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations).oracle · applications manager · CWE-306 Auth bypass	High8.8	—	0.4%	Oct 20, 2026
34Monitor	CVE-2026-91534No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).oracle corporation · oracle business intelligence enterprise edition · CWE-306 Pre-auth Auth bypass	High8.6	—	0.2%	Oct 20, 2026
35Monitor	CVE-2026-91535No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).oracle corporation · oracle business intelligence enterprise edition · CWE-306 Auth bypass	High8.8	—	0.2%	Oct 20, 2026
31Monitor	CVE-2026-91537No exploit	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).oracle · solaris · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
31Monitor	CVE-2026-91539No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).oracle corporation · oracle business intelligence enterprise edition · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-91542No exploit	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).oracle · webcenter sites · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Oct 20, 2026
31Monitor	CVE-2026-91545No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).oracle corporation · oracle business intelligence enterprise edition · CWE-284 Broken access control (IDOR)	High7.8	—	0.1%	Oct 20, 2026
32Monitor	CVE-2026-91546No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation).oracle corporation · oracle business intelligence enterprise edition · CWE-306 Pre-auth Auth bypass	High8.1	—	0.2%	Oct 20, 2026
31Monitor	CVE-2026-91549No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).oracle corporation · oracle business intelligence enterprise edition · CWE-601 Open redirect	High7.8	—	0.1%	Oct 20, 2026
35Monitor	CVE-2026-91550No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91552No exploit	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).oracle · webcenter sites · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Oct 20, 2026
28Monitor	CVE-2026-91557No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation).oracle corporation · oracle business intelligence enterprise edition · CWE-269 Local privilege escalation	High7.0	—	0.0%	Oct 20, 2026
35Monitor	CVE-2026-91563No exploit	Vulnerability in the Oracle OLAP component of Oracle Database Server.oracle corporation · oracle olap · CWE-269	High8.8	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91568No exploit	Vulnerability in the RDBMS component of Oracle Database Server.oracle corporation · oracle database server · CWE-284 Broken access control (IDOR)	High7.7	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-91573No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-306 Pre-auth Auth bypass	High8.2	—	0.2%	Oct 20, 2026
35Monitor	CVE-2026-91579No exploit	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).oracle corporation · oracle bi publisher · CWE-601 Pre-auth Open redirect	High8.8	—	0.2%	Oct 20, 2026
33Monitor	CVE-2026-91597No exploit	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).oracle corporation · oracle business intelligence enterprise edition · CWE-284 Pre-auth Broken access control (IDOR)	High8.3	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-91604No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Broken access control (IDOR)	High7.5	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91608No exploit	Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).oracle corporation · oracle bi publisher · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-91610No exploit	Vulnerability in Oracle REST Data Services (component: General).oracle corporation · oracle rest data services · CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Oct 20, 2026
37Monitor	CVE-2026-91622No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.2%	Oct 20, 2026
29Monitor	CVE-2026-91623No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Oct 20, 2026
36Monitor	CVE-2026-91624No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-91625No exploit	Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manageoracle corporation · oracle agile product lifecycle management for process · CWE-306 Pre-auth Auth bypass	High8.2	—	0.2%	Oct 20, 2026
31Monitor	CVE-2026-91627No exploit	Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).oracle corporation · oracle communications billing and revenue management · CWE-269 Local privilege escalation	High7.8	—	0.1%	Oct 20, 2026
30Monitor	CVE-2026-91632No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-200 Info leak	High7.7	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-91635No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91636No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-200 Info leak	High7.7	—	0.3%	Oct 20, 2026
39Monitor	CVE-2026-91637No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.3%	Oct 20, 2026
39Monitor	CVE-2026-91638No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Oct 20, 2026
30Monitor	CVE-2026-91639No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-200 Info leak	High7.7	—	0.3%	Oct 20, 2026
29Monitor	CVE-2026-91642No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-284 Pre-auth Broken access control (IDOR)	High7.3	—	0.2%	Oct 20, 2026
37Monitor	CVE-2026-91644No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.2%	Oct 20, 2026
32Monitor	CVE-2026-91647No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.3%	Oct 20, 2026
34Monitor	CVE-2026-91651No exploit	Vulnerability in Oracle Essbase (component: Essbase Web Platform).oracle · essbase · CWE-284 Broken access control (IDOR)	High8.5	—	0.3%	Oct 20, 2026
34Monitor	CVE-2026-91653No exploit	Vulnerability in Oracle Essbase (component: Essbase Web Platform).oracle · essbase · CWE-284 Broken access control (IDOR)	High8.5	—	0.1%	Oct 20, 2026
36Monitor	CVE-2026-91655No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-284 Broken access control (IDOR)	Critical9.1	—	0.2%	Oct 20, 2026
36Monitor	CVE-2026-91656No exploit	Vulnerability in Oracle Essbase (component: Federated Partitions).oracle · essbase · CWE-284 Broken access control (IDOR)	Critical9.1	—	0.2%	Oct 20, 2026
39Monitor	CVE-2026-91658No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91659No exploit	Vulnerability in Oracle Essbase (component: Build).oracle · essbase · CWE-284 Broken access control (IDOR)	High7.7	—	0.2%	Oct 20, 2026
30Monitor	CVE-2026-91661No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-200 Info leak	High7.7	—	0.3%	Oct 20, 2026
39Monitor	CVE-2026-91663No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.3%	Oct 20, 2026
30Monitor	CVE-2026-91664No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-400 Pre-auth Denial of service	High7.5	—	0.2%	Oct 20, 2026
39Monitor	CVE-2026-91665No exploit	Vulnerability in Oracle Essbase (component: Security).oracle · essbase · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 20, 2026
35Monitor	CVE-2026-91668No exploit	Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository).oracle · data integrator · CWE-269	High8.8	—	0.2%	Oct 20, 2026
39Monitor	CVE-2026-92559No exploit	IBM App Connect Enterprise is vulnerable to a credential exposureibm · app connect enterprise · CWE-1327 Pre-auth	Critical9.8	—	0.5%	Oct 20, 2026
34Monitor	CVE-2026-93441No exploit	IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of serviceibm · qradar security information and event management · CWE-400 Pre-auth Denial of service	High8.6	—	0.3%	Oct 20, 2026
32Monitor	CVE-2026-93442No exploit	IBM QRadar SIEM Out-of-bounds Readibm · qradar · CWE-125 Pre-auth Memory safety	High8.2	—	0.4%	Oct 20, 2026
31Monitor	CVE-2026-93888No exploit	IBM Sterling Connect:Direct for Unix Buffer Overflowibm · sterling connect direct for unix · CWE-121 RCE Memory safety	High7.8	—	0.2%	Oct 20, 2026
33Monitor	CVE-2020-37286No exploit	Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Callsvyperlang · vyper · CWE-787 Pre-auth Memory safety	High8.3	—	0.2%	Oct 21, 2026
32Monitor	CVE-2020-37287No exploit	Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Argumentsvyperlang · vyper · CWE-131 Pre-auth	High8.2	—	0.2%	Oct 21, 2026
33Monitor	CVE-2021-48018No exploit	Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decoratorvyperlang · vyper · CWE-787 Pre-auth Memory safety	High8.3	—	0.3%	Oct 21, 2026
33Monitor	CVE-2021-48020No exploit	Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arraysvyperlang · vyper · CWE-787 Pre-auth Memory safety	High8.3	—	0.2%	Oct 21, 2026
34Monitor	CVE-2025-71437No exploit	Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extractionastral-sh · uv · CWE-22 Pre-auth Path traversal	High8.7	—	0.3%	Oct 21, 2026
34Monitor	CVE-2026-105044No exploit	OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolboxqingteng · host adaptive security platform · CWE-78 pre-auth RCE Command injection	High8.5	—	0.9%	Oct 21, 2026
27Monitor	CVE-2026-111943Proof of concept	Distrust compromised intermediate certificates in crypto/x509go standard library · crypto/x509 · CWE-299 Pre-auth	Medium6.8	—	0.3%	Oct 21, 2026
35Monitor	CVE-2026-113736No exploit	D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty passwordd-link · dhp-w610av · CWE-258 Pre-auth	High8.9	—	0.9%	Oct 21, 2026
28Monitor	CVE-2026-114042No exploit	FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDUfreerdp · freerdp · CWE-416 Pre-auth Memory safety	High7.1	—	0.3%	Oct 21, 2026
28Monitor	CVE-2026-114043No exploit	Vulnerability in FreeRDPfreerdp · freerdp · CWE-125 Pre-auth Memory safety	High7.1	—	0.4%	Oct 21, 2026
34Monitor	CVE-2026-114045No exploit	FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_formatfreerdp · freerdp · CWE-122 Memory safety	High8.7	—	0.5%	Oct 21, 2026
28Monitor	CVE-2026-114046No exploit	FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcardfreerdp · freerdp · CWE-476 Pre-auth Memory safety	High7.1	—	0.3%	Oct 21, 2026
30Monitor	CVE-2026-114047No exploit	FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validationfreerdp · freerdp · CWE-295 Pre-auth Weak crypto	High7.6	—	0.1%	Oct 21, 2026
28Monitor	CVE-2026-114050No exploit	vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUIDvllm · vllm · CWE-345	High7.1	—	0.2%	Oct 21, 2026
28Monitor	CVE-2026-114051No exploit	vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generatevllm · vllm · CWE-248	High7.1	—	0.3%	Oct 21, 2026
34Monitor	CVE-2026-114052No exploit	vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargsvllm · vllm · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	Oct 21, 2026
36Monitor	CVE-2026-114053No exploit	vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revisionvllm · vllm · CWE-94 pre-auth RCE	Critical9.2	—	0.4%	Oct 21, 2026
28Monitor	CVE-2026-114054No exploit	vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keysvllm · vllm · CWE-284 Broken access control (IDOR)	High7.1	—	0.2%	Oct 21, 2026

CVE-2026-91448
30Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle · siebel crmOct 20, 2026
CVE-2026-91449
29Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · siebel crmOct 20, 2026
CVE-2026-91450
29Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · siebel crmOct 20, 2026
CVE-2026-91457
31Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).
HighCVSS 7.8No exploitEPSS 0%
oracle · outside in technologyOct 20, 2026
CVE-2026-91458
31Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).
HighCVSS 7.8No exploitEPSS 0%
oracle · outside in technologyOct 20, 2026
CVE-2026-91459
31Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
oracle · outside in technologyOct 20, 2026
CVE-2026-91460
31Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK).
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
oracle · outside in technologyOct 20, 2026
CVE-2026-91465
30Monitor
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle corporation · peoplesoft enterprise fin common objects argentinaOct 20, 2026
CVE-2026-91473
31Monitor
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle http serverOct 20, 2026
CVE-2026-91478
35Monitor
Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · peoplesoft enterprise scm strategic sourcingOct 20, 2026
CVE-2026-91483
31Monitor
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
oracle · outside in technologyOct 20, 2026
CVE-2026-91484
30Monitor
Vulnerability in Oracle Java SE (component: Java plugin).
HighCVSS 7.5No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle corporation · oracle java seOct 20, 2026
CVE-2026-91488
28Monitor
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST).
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · identity manager connectorOct 20, 2026
CVE-2026-91489
28Monitor
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · identity manager connectorOct 20, 2026
CVE-2026-91490
36Monitor
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · identity manager connectorOct 20, 2026
CVE-2026-91491
39Monitor
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · identity manager connectorOct 20, 2026
CVE-2026-91492
34Monitor
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+).
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · identity manager connectorOct 20, 2026
CVE-2026-91493
30Monitor
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · identity manager connectorOct 20, 2026
CVE-2026-91494
29Monitor
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · identity manager connectorOct 20, 2026
CVE-2026-91495
39Monitor
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · webcenter contentOct 20, 2026
CVE-2026-91496
30Monitor
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · workflowOct 20, 2026
CVE-2026-91499
35Monitor
Vulnerability in the RDBMS component of Oracle Database Server.
HighCVSS 8.8No exploitEPSS 0%
oracle corporation · oracle database serverOct 20, 2026
CVE-2026-91502
29Monitor
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle weblogic serverOct 20, 2026
CVE-2026-91503
32Monitor
Vulnerability in the VPD component of Oracle Database Server.
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle database serverOct 20, 2026
CVE-2026-91504
30Monitor
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite).
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · webcenter contentOct 20, 2026
CVE-2026-91506
32Monitor
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · workflowOct 20, 2026
CVE-2026-91511
28Monitor
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · purchasingOct 20, 2026
CVE-2026-91512
28Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91515
30Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 7.5No exploitEPSS 0%
- Auth bypass
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91517
32Monitor
Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin).
HighCVSS 8.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle management pack for oracle goldengateOct 20, 2026
CVE-2026-91520
35Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91521
35Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91527
35Monitor
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle zfs storage appliance kitOct 20, 2026
CVE-2026-91532
35Monitor
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · applications managerOct 20, 2026
CVE-2026-91534
34Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle business intelligence enterprise editionOct 20, 2026
CVE-2026-91535
35Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle corporation · oracle business intelligence enterprise editionOct 20, 2026
CVE-2026-91537
31Monitor
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle · solarisOct 20, 2026
CVE-2026-91539
31Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle business intelligence enterprise editionOct 20, 2026
CVE-2026-91542
30Monitor
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle · webcenter sitesOct 20, 2026
CVE-2026-91545
31Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).
HighCVSS 7.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle business intelligence enterprise editionOct 20, 2026
CVE-2026-91546
32Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle business intelligence enterprise editionOct 20, 2026
CVE-2026-91549
31Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).
HighCVSS 7.8No exploitEPSS 0%
- Open redirect
oracle corporation · oracle business intelligence enterprise editionOct 20, 2026
CVE-2026-91550
35Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91552
30Monitor
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle · webcenter sitesOct 20, 2026
CVE-2026-91557
28Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation).
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle business intelligence enterprise editionOct 20, 2026
CVE-2026-91563
35Monitor
Vulnerability in the Oracle OLAP component of Oracle Database Server.
HighCVSS 8.8No exploitEPSS 0%
oracle corporation · oracle olapOct 20, 2026
CVE-2026-91568
30Monitor
Vulnerability in the RDBMS component of Oracle Database Server.
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle database serverOct 20, 2026
CVE-2026-91573
32Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91579
35Monitor
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Open redirect
oracle corporation · oracle bi publisherOct 20, 2026
CVE-2026-91597
33Monitor
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle business intelligence enterprise editionOct 20, 2026
CVE-2026-91604
30Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91608
30Monitor
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
oracle corporation · oracle bi publisherOct 20, 2026
CVE-2026-91610
35Monitor
Vulnerability in Oracle REST Data Services (component: General).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle corporation · oracle rest data servicesOct 20, 2026
CVE-2026-91622
37Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91623
29Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91624
36Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91625
32Monitor
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle corporation · oracle agile product lifecycle management for processOct 20, 2026
CVE-2026-91627
31Monitor
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
oracle corporation · oracle communications billing and revenue managementOct 20, 2026
CVE-2026-91632
30Monitor
Vulnerability in Oracle Essbase (component: Security).
HighCVSS 7.7No exploitEPSS 0%
- Info leak
oracle · essbaseOct 20, 2026
CVE-2026-91635
32Monitor
Vulnerability in Oracle Essbase (component: Security).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91636
30Monitor
Vulnerability in Oracle Essbase (component: Security).
HighCVSS 7.7No exploitEPSS 0%
- Info leak
oracle · essbaseOct 20, 2026
CVE-2026-91637
39Monitor
Vulnerability in Oracle Essbase (component: Security).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91638
39Monitor
Vulnerability in Oracle Essbase (component: Security).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91639
30Monitor
Vulnerability in Oracle Essbase (component: Security).
HighCVSS 7.7No exploitEPSS 0%
- Info leak
oracle · essbaseOct 20, 2026
CVE-2026-91642
29Monitor
Vulnerability in Oracle Essbase (component: Security).
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91644
37Monitor
Vulnerability in Oracle Essbase (component: Security).
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91647
32Monitor
Vulnerability in Oracle Essbase (component: Security).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91651
34Monitor
Vulnerability in Oracle Essbase (component: Essbase Web Platform).
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91653
34Monitor
Vulnerability in Oracle Essbase (component: Essbase Web Platform).
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91655
36Monitor
Vulnerability in Oracle Essbase (component: Security).
CriticalCVSS 9.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91656
36Monitor
Vulnerability in Oracle Essbase (component: Federated Partitions).
CriticalCVSS 9.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91658
39Monitor
Vulnerability in Oracle Essbase (component: Security).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91659
30Monitor
Vulnerability in Oracle Essbase (component: Build).
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91661
30Monitor
Vulnerability in Oracle Essbase (component: Security).
HighCVSS 7.7No exploitEPSS 0%
- Info leak
oracle · essbaseOct 20, 2026
CVE-2026-91663
39Monitor
Vulnerability in Oracle Essbase (component: Security).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle · essbaseOct 20, 2026
CVE-2026-91664
30Monitor
Vulnerability in Oracle Essbase (component: Security).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · essbaseOct 20, 2026
CVE-2026-91665
39Monitor
Vulnerability in Oracle Essbase (component: Security).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · essbaseOct 20, 2026
CVE-2026-91668
35Monitor
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository).
HighCVSS 8.8No exploitEPSS 0%
oracle · data integratorOct 20, 2026
CVE-2026-92559
39Monitor
IBM App Connect Enterprise is vulnerable to a credential exposure
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ibm · app connect enterpriseOct 20, 2026
CVE-2026-93441
34Monitor
IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · qradar security information and event managementOct 20, 2026
CVE-2026-93442
32Monitor
IBM QRadar SIEM Out-of-bounds Read
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
ibm · qradarOct 20, 2026
CVE-2026-93888
31Monitor
IBM Sterling Connect:Direct for Unix Buffer Overflow
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
ibm · sterling connect direct for unixOct 20, 2026
CVE-2020-37286
33Monitor
Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Calls
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
vyperlang · vyperOct 21, 2026
CVE-2020-37287
32Monitor
Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Arguments
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
vyperlang · vyperOct 21, 2026
CVE-2021-48018
33Monitor
Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decorator
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
vyperlang · vyperOct 21, 2026
CVE-2021-48020
33Monitor
Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arrays
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
vyperlang · vyperOct 21, 2026
CVE-2025-71437
34Monitor
Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
astral-sh · uvOct 21, 2026
CVE-2026-105044
34Monitor
OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox
HighCVSS 8.5No exploitEPSS 0%
- pre-auth RCE
- Command injection
qingteng · host adaptive security platformOct 21, 2026
CVE-2026-111943
27Monitor
Distrust compromised intermediate certificates in crypto/x509
MediumCVSS 6.8Proof of conceptEPSS 0%
- Pre-auth
go standard library · crypto/x509Oct 21, 2026
CVE-2026-113736
35Monitor
D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty password
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
d-link · dhp-w610avOct 21, 2026
CVE-2026-114042
28Monitor
FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDU
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 21, 2026
CVE-2026-114043
28Monitor
Vulnerability in FreeRDP
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 21, 2026
CVE-2026-114045
34Monitor
FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_format
HighCVSS 8.7No exploitEPSS 0%
- Memory safety
freerdp · freerdpOct 21, 2026
CVE-2026-114046
28Monitor
FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcard
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpOct 21, 2026
CVE-2026-114047
30Monitor
FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Weak crypto
freerdp · freerdpOct 21, 2026
CVE-2026-114050
28Monitor
vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID
HighCVSS 7.1No exploitEPSS 0%
vllm · vllmOct 21, 2026
CVE-2026-114051
28Monitor
vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate
HighCVSS 7.1No exploitEPSS 0%
vllm · vllmOct 21, 2026
CVE-2026-114052
34Monitor
vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
vllm · vllmOct 21, 2026
CVE-2026-114053
36Monitor
vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
vllm · vllmOct 21, 2026
CVE-2026-114054
28Monitor
vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
vllm · vllmOct 21, 2026