Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

693894 source statements · aliases may refer to the same vulnerability

CVE-2026-92287Published

Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

cve-program ·

Vendor product: Apache Arrow C++ · https://pypi.python.org: pyarrow

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-115796Published

Tenda F6 Web Management cross-site request forgery

cve-program ·

Vendor product: F6

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91224Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with …

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 9.9Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91225Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with net…

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 9.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91226Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker wit…

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 7.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91227Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker wit…

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 7.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2025-60482Published

A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

cve-program ·

Vendor product: n/a

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91228Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with …

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 7.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91229Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker wit…

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 7.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91230Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 9.3Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-86467Published

Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account

cve-program ·

https://pypi.python.org: apache-airflow-providers-amazon

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91231Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with net…

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 10.0Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-115580Published

pypdf: Possible long runtimes for large xref table header limits

cve-program ·

Vendor product: pypdf

CVSS 4.0 7.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91232Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with …

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 9.9Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-115567Published

Tokio: Race condition in `tokio::time::Interval`

cve-program ·

Vendor product: tokio

CVSS 4.0 5.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91237Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 7.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91244Published

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where …

cve-program ·

Vendor product: Oracle Solaris

CVSS 3.1 4.7Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-97406Published

Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting

cve-program ·

Vendor product: Console API

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-57845Published

Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder

cve-program ·

Vendor product: datasets

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-93446Published

Apache Tomcat: Possible TLS 1.3 connection failures

cve-program ·

Vendor product: Apache Tomcat

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-46531Published

Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (incomplete-fix variant of CVE-2024-31460 / CVE-2025-24368)

cve-program ·

Vendor product: cacti

CVSS 3.1 5.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-55465Published

Goobi viewer: Solr injection via unvalidated region parameter in spatial search

cve-program ·

Vendor product: goobi-viewer-core

CVSS 3.1 5.3Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-88041Published

Apache Tomcat: HTTP/2 trailer header cross-contamination

cve-program ·

Vendor product: Apache Tomcat

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91245Published

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attac…

cve-program ·

Vendor product: Oracle WebCenter Portal

CVSS 3.1 6.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-55444Published

Goobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters

cve-program ·

Vendor product: goobi-viewer-core

CVSS 3.1 5.3Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91246Published

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attac…

cve-program ·

Vendor product: Oracle WebCenter Portal

CVSS 3.1 6.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-46651Published

Unauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi viewer

cve-program ·

Vendor product: goobi-viewer-core

CVSS 3.1 9.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-80353Published

Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector

cve-program ·

Vendor product: Apache Tomcat

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-115477Published

obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP

cve-program ·

Vendor product: obsidian-tc

CVSS 4.0 7.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-114621Published

baserCMS: SQL injection in the admin panel and admin API

cve-program ·

Vendor product: basercms

CVSS 3.1 8.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-89009Published

WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server

cve-program ·

Vendor product: WN535M1 · Vendor product: WN535M3

CVSS 4.0 8.8 · CVSS 3.1 9.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-74049Published

Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)

cve-program ·

Vendor product: Apache Tomcat

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-89010Published

WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server

cve-program ·

Vendor product: WN535M1 · Vendor product: WN535M3

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-115480Published

baserCMS: Public Web API mail-form submission bypasses image CAPTCHA

cve-program ·

Vendor product: basercms

CVSS 3.1 5.3Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-74048Published

Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up

cve-program ·

Vendor product: Apache Tomcat

Source modified 29 Oct 2026Recorded 29 Oct 2026

GHSA-6q5m-63h6-5x4vPublished

LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern

osv · CVE-2026-33287

npm: liquidjs

HIGHSource modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-87743Published

Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security

cve-program ·

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html: quarkus-vertx-http · https://access.redhat.com/jbossnetwork/restricted/listSoftware.html: quarkus-vertx-http · https://catalog.redhat.com/software/containers/: devspaces/multicluster-redirector-rhel9

CVSS 3.1 7.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91248Published

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attac…

cve-program ·

Vendor product: Oracle WebCenter Portal

CVSS 3.1 5.3Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-113399Published

Incorrect boundary conditions in the SVG component

cve-program ·

Vendor product: Firefox · Vendor product: Thunderbird

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91217Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 8.6Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-55606Published

odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()

cve-program ·

Vendor product: odhcpd

CVSS 3.1 6.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-91216Published

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…

cve-program ·

Vendor product: Oracle SOA Suite

CVSS 3.1 10.0Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-115751Published

mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname

cve-program ·

Vendor product: mcp-from-openapi

CVSS 4.0 6.3 · CVSS 3.1 3.7Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-115729Published

@pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass

cve-program ·

Vendor product: common

CVSS 4.0 8.9 · CVSS 3.1 6.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-34485Published

A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)

cve-program ·

Vendor product: Nokia 1830 Global Express (GX)

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-34484Published

A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)

cve-program ·

Vendor product: Nokia 1830 Global Express (GX)

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-108088Published

Apache Cocoon: Cross-user cache poisoning

cve-program ·

Vendor product: Apache Cocoon

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-15146Published

CVE-2026-15146

cve-program ·

Vendor product: Wget

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-86977Published

An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.

cve-program ·

Vendor product: iOS and iPadOS

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-86868Published

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be able to impersonate other users.

cve-program ·

Vendor product: macOS

Source modified 29 Oct 2026Recorded 29 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.