Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-87303 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) MEDIUM 5.9 N/A cvelistv5 2026-10-27
cve-2026-87302 cve-2026-87302 CRITICAL 9.1 N/A cvelistv5 unknown
cve-2026-87301 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) HIGH 8.4 N/A cvelistv5 2026-10-27
cve-2026-87300 cve-2026-87300 HIGH 8.7 N/A cvelistv5 unknown
cve-2026-87299 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.1 N/A cvelistv5 2026-11-03
cve-2026-87298 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) MEDIUM 6.5 N/A cvelistv5 2026-11-03
cve-2026-87297 Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component... MEDIUM 6.7 N/A cvelistv5 2026-10-27
cve-2026-87296 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine) HIGH 7.5 N/A cvelistv5 2026-11-04
cve-2026-87295 Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll) MEDIUM 6.5 N/A cvelistv5 2026-11-03
cve-2026-87294 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java... MEDIUM 6.5 N/A cvelistv5 2026-10-27
cve-2026-87293 Vulnerability in Oracle Java SE (component: RMI) MEDIUM 5.4 N/A cvelistv5 2026-10-27
cve-2026-87292 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java... LOW 3.7 N/A cvelistv5 2026-10-27
cve-2026-87291 Vulnerability in Oracle Java SE (component: Networking) MEDIUM 5.3 N/A cvelistv5 2026-10-27
cve-2026-87290 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java... MEDIUM 5.9 N/A cvelistv5 2026-10-27
cve-2026-87263 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytic... HIGH 8.8 N/A cvelistv5 2026-10-27
cve-2026-87255 Vulnerability in Oracle Java SE (component: Compiler) LOW 3.7 N/A cvelistv5 2026-10-27
cve-2026-87251 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine) CRITICAL 9.8 N/A cvelistv5 2026-11-04
cve-2026-8643 python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite HIGH 8.0 N/A cvelistv5 2026-09-04
cve-2026-86219 SUSE CVE CVE-2026-86219 HIGH 7.4 N/A cvelistv5 2026-09-25
cve-2026-86144 SUSE CVE CVE-2026-86144 UNKNOWN N/A N/A cvelistv5 2026-09-11
cve-2026-86143 SUSE CVE CVE-2026-86143 UNKNOWN N/A N/A cvelistv5 2026-09-10
cve-2026-86142 SUSE CVE CVE-2026-86142 UNKNOWN N/A N/A cvelistv5 2026-09-15
cve-2026-86140 libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements HIGH 7.4 N/A cvelistv5 2026-09-08
cve-2026-86138 SUSE CVE CVE-2026-86138 UNKNOWN N/A N/A cvelistv5 2026-09-10
cve-2026-84939 org.apache.freemarker/freemarker: Apache FreeMarker: Path traversal via malformed locale identifier HIGH 7.5 N/A cvelistv5 2026-09-18
cve-2026-84501 zookeeper: Apache ZooKeeper: Operational log forgery via newline injection MEDIUM 5.3 N/A cvelistv5 2026-09-28
cve-2026-84439 When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitrary fields ... MEDIUM 5.3 N/A cvelistv5 2026-09-18
cve-2026-8384 jetty: Eclipse Jetty: Path confusion vulnerability may lead to information disclosure in web applications MEDIUM 5.3 N/A cvelistv5 2026-08-05
cve-2026-8376 SUSE CVE CVE-2026-8376 MEDIUM 5.7 N/A cvelistv5 2026-09-09
cve-2026-83427 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework) MEDIUM 6.6 N/A cvelistv5 2026-10-27