Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-8926 curl: curl: Information disclosure via incorrect .netrc password lookup MEDIUM 4.8 N/A cvelistv5 2026-09-01
cve-2026-89044 netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypass MEDIUM 6.5 N/A cvelistv5 2026-10-14
cve-2026-8763 SUSE CVE CVE-2026-8763 CRITICAL 9.1 N/A cvelistv5 2026-10-05
cve-2026-87423 Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System) MEDIUM 4.5 N/A cvelistv5 2026-10-21
cve-2026-87422 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services) LOW 2.5 N/A cvelistv5 2026-10-21
cve-2026-87421 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System) HIGH 7.1 N/A cvelistv5 2026-10-21
cve-2026-87420 Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core) HIGH 8.8 N/A cvelistv5 2026-10-21
cve-2026-87419 Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core) HIGH 8.8 N/A cvelistv5 2026-10-21
cve-2026-87418 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment M... LOW 2.5 N/A cvelistv5 2026-10-27
cve-2026-87417 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System) HIGH 7.5 N/A cvelistv5 2026-10-21
cve-2026-87416 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) LOW 3.7 N/A cvelistv5 2026-10-27
cve-2026-87415 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) MEDIUM 5.3 N/A cvelistv5 2026-10-27
cve-2026-87414 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System) LOW 3.1 N/A cvelistv5 2026-10-21
cve-2026-87413 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems) MEDIUM 5.5 N/A cvelistv5 2026-10-21
cve-2026-87412 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) LOW 2.7 N/A cvelistv5 2026-10-27
cve-2026-87411 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems) MEDIUM 5.5 N/A cvelistv5 2026-10-21
cve-2026-87410 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution) MEDIUM 6.8 N/A cvelistv5 2026-10-27
cve-2026-87409 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision) MEDIUM 6.5 N/A cvelistv5 2026-10-27
cve-2026-87408 Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization) HIGH 8.7 N/A cvelistv5 2026-10-27
cve-2026-87407 Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Security) MEDIUM 6.5 N/A cvelistv5 2026-10-21
cve-2026-87404 Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine) HIGH 7.5 N/A cvelistv5 2026-10-21
cve-2026-87403 Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities) HIGH 7.1 N/A cvelistv5 2026-10-21
cve-2026-87402 Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities) HIGH 7.3 N/A cvelistv5 2026-10-21
cve-2026-87401 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher) LOW 3.3 N/A cvelistv5 2026-10-27
cve-2026-87400 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.9 N/A cvelistv5 2026-11-03
cve-2026-87399 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.3 N/A cvelistv5 2026-11-03
cve-2026-87398 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). HIGH 7.5 N/A cvelistv5 2026-11-04
cve-2026-87397 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Outside In Technology. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). HIGH 8.8 N/A cvelistv5 2026-11-04
cve-2026-87396 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). MEDIUM 6.5 N/A cvelistv5 2026-11-04
cve-2026-87395 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Outside In Technology. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). HIGH 7.5 N/A cvelistv5 2026-11-04