Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-83378 Vulnerability in Oracle Java SE (component: Compiler) MEDIUM 4.8 N/A cvelistv5 2026-10-27
cve-2026-83377 Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Mobile Applications) MEDIUM 5.4 N/A cvelistv5 2026-10-27
cve-2026-83376 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java... LOW 3.7 N/A cvelistv5 2026-10-27
cve-2026-83375 Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Wo... MEDIUM 6.0 N/A cvelistv5 2026-10-27
cve-2026-83374 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java... MEDIUM 5.9 N/A cvelistv5 2026-10-27
cve-2026-83373 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) LOW 3.0 N/A cvelistv5 2026-10-27
cve-2026-83372 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal) MEDIUM 5.4 N/A cvelistv5 2026-10-27
cve-2026-83371 Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations) MEDIUM 5.4 N/A cvelistv5 2026-10-27
cve-2026-83370 Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions) HIGH 7.5 N/A cvelistv5 2026-10-27
cve-2026-83367 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events) HIGH 7.4 N/A cvelistv5 2026-10-27
cve-2026-83366 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events) HIGH 7.4 N/A cvelistv5 2026-10-27
cve-2026-83363 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (compo... HIGH 8.8 N/A cvelistv5 2026-10-29
cve-2026-83361 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (compo... HIGH 8.1 N/A cvelistv5 2026-10-29
cve-2026-83360 Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll) MEDIUM 6.5 N/A cvelistv5 2026-11-03
cve-2026-83359 Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll) MEDIUM 6.5 N/A cvelistv5 2026-11-03
cve-2026-83358 Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations) MEDIUM 6.5 N/A cvelistv5 2026-10-27
cve-2026-83139 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools) MEDIUM 6.5 N/A cvelistv5 2026-10-27
cve-2026-79993 zookeeper: Apache ZooKeeper: Unauthorized znode deletion via missing ACL check CRITICAL 9.1 N/A cvelistv5 2026-10-16
cve-2026-79772 nokogiri: Nokogiri: Signature validation bypass via unchecked return value MEDIUM 5.3 N/A cvelistv5 2026-08-27
cve-2026-79771 nokogiri: Nokogiri: Denial of Service via XSLT transform memory leak MEDIUM 5.3 N/A cvelistv5 2026-08-27
cve-2026-79770 nokogiri: Nokogiri: Denial of Service via crafted CSS selectors HIGH 7.5 N/A cvelistv5 2026-09-02
cve-2026-79769 nokogiri: Nokogiri: Process crash due to invalid memory read via programming error in internal method MEDIUM 5.5 N/A cvelistv5 2026-08-27
cve-2026-78254 SUSE CVE CVE-2026-78254 HIGH 8.1 N/A cvelistv5 2026-09-19
cve-2026-78030 perl-DBI: DBI: Loading of arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM HIGH 7.5 N/A cvelistv5 2026-10-14
cve-2026-77422 org.jline/jline: JLine: Denial of Service via regular expression processing in built-in grep command HIGH 7.5 N/A cvelistv5 2026-10-02
cve-2026-77421 org.jline/jline-builtins: JLine: Denial of Service in Nano Editor Regex Search MEDIUM 5.7 N/A cvelistv5 2026-09-24
cve-2026-77420 SUSE CVE CVE-2026-77420 UNKNOWN N/A N/A cvelistv5 2026-09-24
cve-2026-77310 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor MEDIUM 5.3 N/A cvelistv5 2026-10-12
cve-2026-75803 SUSE CVE CVE-2026-75803 MEDIUM 5.3 N/A cvelistv5 2026-09-17
cve-2026-75596 Netty is an asynchronous, event-driven network application framework HIGH 8.7 N/A cvelistv5 2026-10-26