Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,772 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-9825 | 3.7 Low | IBM Cyber Fraud Reachable Assertion | Oct 20, 2026 |
| CVE-2026-113732 | 7.8 High | virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote | Oct 20, 2026 |
| CVE-2026-113704 | 6.9 Medium | a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgery | Oct 20, 2026 |
| CVE-2026-81212 | 10.0 Critical | DataStage on Cloud Pak for Data Improper Authorization | Oct 20, 2026 |
| CVE-2026-82891 | 8.1 High | IBM Guardium Data Protection is affected by a security vulnerability | Oct 20, 2026 |
| CVE-2026-87800 | 6.8 Medium | IBM Cyber Fraud includes components with multiple known vulnerabilities | Oct 20, 2026 |
| CVE-2026-92559 | 9.8 Critical | IBM App Connect Enterprise is vulnerable to a credential exposure | Oct 20, 2026 |
| CVE-2026-93441 | 8.6 High | IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service | Oct 20, 2026 |
| CVE-2026-93442 | 8.2 High | IBM QRadar SIEM Out-of-bounds Read | Oct 20, 2026 |
| CVE-2026-93744 | 6.5 Medium | IBM i Improper Authentication | Oct 20, 2026 |
| CVE-2026-93888 | 7.8 High | IBM Sterling Connect:Direct for Unix Buffer Overflow | Oct 20, 2026 |
| CVE-2026-94402 | 6.1 Medium | IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation | Oct 20, 2026 |
| CVE-2026-113731 | 3.3 Low | djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool | Oct 20, 2026 |
| CVE-2026-85783 | 7.5 High | Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key | Oct 20, 2026 |
| CVE-2026-91668 | 8.8 High | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low… | Oct 20, 2026 |
| CVE-2026-91665 | 9.8 Critical | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91664 | 7.5 High | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91663 | 9.9 Critical | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91662 | 6.4 Medium | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase… | Oct 20, 2026 |
| CVE-2026-91661 | 7.7 High | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91660 | 4.3 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91659 | 7.7 High | Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While… | Oct 20, 2026 |
| CVE-2026-91658 | 9.9 Critical | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91657 | 4.3 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91656 | 9.1 Critical | Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle… | Oct 20, 2026 |
| CVE-2026-91655 | 9.1 Critical | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91654 | 6.3 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91653 | 8.5 High | Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle… | Oct 20, 2026 |
| CVE-2026-91652 | 5.0 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91651 | 8.5 High | Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle… | Oct 20, 2026 |
| CVE-2026-91650 | 3.7 Low | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle… | Oct 20, 2026 |
| CVE-2026-91649 | 6.0 Medium | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase… | Oct 20, 2026 |
| CVE-2026-91648 | 5.3 Medium | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle… | Oct 20, 2026 |
| CVE-2026-91647 | 8.1 High | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91646 | 5.6 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle… | Oct 20, 2026 |
| CVE-2026-91645 | 5.3 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91644 | 9.3 Critical | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91643 | 5.3 Medium | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle… | Oct 20, 2026 |
| CVE-2026-91642 | 7.3 High | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91641 | 5.0 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91640 | 5.0 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91639 | 7.7 High | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91638 | 9.9 Critical | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91637 | 9.9 Critical | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91636 | 7.7 High | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91635 | 8.1 High | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle… | Oct 20, 2026 |
| CVE-2026-91634 | 5.3 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91633 | 6.0 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes… | Oct 20, 2026 |
| CVE-2026-91632 | 7.7 High | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
| CVE-2026-91631 | 5.0 Medium | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase.… | Oct 20, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.