Vulnerabilities
Summary — last 7 days
New vulnerabilities4,795▼ 470 vs. last week
Critical / high1,887▼ 1,153 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)818▲ 709 vs. last week
More filters
299 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Critical (9.8) | 0.36% | — | Oracle Identity Manager ConnectorAI | 10/20/2026 | 10/21/2026 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Identity Manager… | |
| Awaiting Analysis | Critical (9.1) | 0.40% | — | Oracle Identity Manager ConnectorAI | 10/20/2026 | 10/21/2026 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Identity Manager… | |
| Deferred | Critical (9.8) | 0.79% | — | Jtl-software Jtl-connectorAI | 10/14/2026 | 10/14/2026 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth parameter as a valid credential, combined with insufficient file type validation… | |
| Deferred | Critical (9.8) | 0.35% | — | Designinvento DirectorypressAI | 10/10/2026 | 10/13/2026 | Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions. | |
| Deferred | Critical (9.8) | 0.53% | — | Dynamic User DirectoryAI | 10/10/2026 | 10/13/2026 | Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions. | |
| Awaiting Analysis | Critical (9.6) | 1.9% | — | Progress Software Autonomous Rest Connector Genai AgentsAI | 10/6/2026 | 10/7/2026 | An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's machine when a user… | |
| Deferred | Critical (9.8) | 0.57% | — | Apache Directory Ldap APIAI | 10/2/2026 | 10/7/2026 | Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server (or pre-TLS MITM) can answer a client's loadSchema() subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache Directory LDAP API: from… | |
| Awaiting Analysis | Critical (9.3) | 1.1% | — | VectorAI | 9/22/2026 | 9/25/2026 | Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confining it to an intended directory. When an untrusted source supplies an event field used by the path template, the value can contain an… | |
| Analyzed | Critical (10) | 14% | ⚠ Active exploitationPoC | Cisco Identity Services EngineCisco Identity Services Engine Passive Identity Connector | 9/16/2026 | 10/7/2026 | A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API… | |
| Awaiting Analysis | Critical (9.1) | 0.33% | — | Cisco Identity Services EngineAICisco Identity Services Engine Passive Identity ConnectorAI | 9/16/2026 | 9/18/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses… | |
| Awaiting Analysis | Critical (9.1) | 0.45% | — | Cisco Identity Services EngineAICisco Identity Services Engine Passive Identity ConnectorAI | 9/16/2026 | 9/18/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses… | |
| Analyzed | Critical (10) | 0.46% | — | Cisco Identity Services EngineCisco Identity Services Engine Passive Identity Connector | 9/16/2026 | 9/28/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses… | |
| Analyzed | Critical (10) | 0.40% | — | Cisco Identity Services EngineCisco Identity Services Engine Passive Identity Connector | 9/16/2026 | 9/28/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses… | |
| Analyzed | Critical (9.9) | 0.37% | — | Cisco Identity Services EngineCisco Identity Services Engine Passive Identity Connector | 9/16/2026 | 9/28/2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses… | |
| Deferred | Critical (9.9) | 0.42% | — | Oracle Internet DirectoryAI | 9/15/2026 | 9/17/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory.… | |
| Deferred | Critical (9.9) | 0.42% | — | Oracle Internet DirectoryAI | 9/15/2026 | 9/17/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory.… | |
| Deferred | Critical (9.9) | 0.42% | — | Oracle Internet DirectoryAI | 9/15/2026 | 9/17/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory.… | |
| Deferred | Critical (9.9) | 0.42% | — | Oracle Internet DirectoryAI | 9/15/2026 | 9/17/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory.… | |
| Analyzed | Critical (9.8) | 0.51% | — | Oracle Internet Directory | 9/15/2026 | 9/22/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Internet Directory.… | |
| Analyzed | Critical (9.8) | 0.51% | — | Oracle Internet Directory | 9/15/2026 | 9/22/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory.… | |
| Analyzed | Critical (9.8) | 0.51% | — | Oracle Internet Directory | 9/15/2026 | 9/22/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory.… | |
| Analyzed | Critical (9.8) | 0.51% | — | Oracle Internet Directory | 9/15/2026 | 9/22/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory.… | |
| Analyzed | Critical (10) | 0.51% | — | Oracle Internet Directory | 9/15/2026 | 9/22/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory.… | |
| Analyzed | Critical (9.8) | 0.51% | — | Oracle Internet Directory | 9/15/2026 | 9/22/2026 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory.… | |
| Analyzed | Critical (9.3) | 0.35% | — | Oracle Identity Manager Connector | 9/15/2026 | 9/22/2026 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware… |