Low advisories

846 low severity advisories, newest first

60 of 846 advisories

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP servervLLMCVE-2026-115917fixed in 0.32.0 Low 3.8Oct 27

Dell Technologies PowerProtect Data Domain: path traversalPowerProtect Data DomainCVE-2026-90727fixed in 8.9.0.0 or later +3 Low 1.9Oct 27

Qt: out-of-bounds writeQtCVE-2026-107590no fix yet Low 3.1Oct 27

Supermicro MBD-X12SPI: attacker could guess the session tokenMBD-X12SPICVE-2026-18451no fix yet Low 3.3Oct 26

Apple iOS and iPadOS: information disclosureiOS and iPadOSCVE-2026-86978fixed in 27.2 +2 Low 3.3Oct 26

Apple macOS: information disclosuremacOSCVE-2026-86923fixed in 15.8.2 +2 Low 3.3Oct 26

Apple iOS and iPadOS: improper authorizationiOS and iPadOSCVE-2026-84605fixed in 26.7.2 +1 Low 3.3Oct 26

Apple macOS: secrets in logsmacOSCVE-2026-84528fixed in 15.8.2 +2 Low 3.3Oct 26

Apple iOS and iPadOS: secrets in logsiOS and iPadOSCVE-2026-113898fixed in 26.7.2 +2 Low 3.3Oct 26

Apple iOS and iPadOS: information disclosureiOS and iPadOSCVE-2026-112707fixed in 26.7.2 +1 Low 3.1Oct 26

Apple Safari: race conditionSafariCVE-2026-112686fixed in 27.2 +2 Low 3.3Oct 26

Apple iOS and iPadOS: out-of-bounds readiOS and iPadOSCVE-2026-112656fixed in 26.7.2 +2 Low 3.3Oct 26

Apple iOS and iPadOS: improper authorizationiOS and iPadOSCVE-2026-112660fixed in 26.7.2 +2 Low 3.3Oct 26

Apple iOS and iPadOS: information disclosureiOS and iPadOSCVE-2026-112665fixed in 26.7.2 +2 Low 3.3Oct 26

Apple iOS and iPadOS: uninitialized resourceiOS and iPadOSCVE-2026-112630fixed in 26.7.2 +2 Low 3.3Oct 26

A permissions issue was addressed with additional sandbox restrictionsmacOSCVE-2026-112558fixed in 15.8.2 +2 Low 3.3Oct 26

Apple macOS: improper authorizationmacOSCVE-2026-112462fixed in 15.8.2 +2 Low 3.3Oct 26

Apple macOS: improper access controlmacOSCVE-2026-112467fixed in 26.7.2 +1 Low 3.3Oct 26

Apple macOS: information disclosuremacOSCVE-2026-112441fixed in 15.8.2 +2 Low 3.3Oct 26

Apple iOS and iPadOS: out-of-bounds readiOS and iPadOSCVE-2026-112425fixed in 26.7.2 +2 Low 2.0Oct 26

Qt: out-of-bounds readQtCVE-2026-107157no fix yet Low 2.1Oct 23

qt: use after freeqtCVE-2026-95620fixed in 6.11.3 Low 3.1Oct 22

GitLab: improper access controlGitLabCVE-2026-14288fixed in 19.3.6 +2 Low 2.7Oct 22

GitLab: improper authorizationGitLabCVE-2026-103515fixed in 19.3.6 +2 Low 3.5Oct 22

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0...GitLabCVE-2026-105711fixed in 19.3.6 +2 Low 3.1Oct 22

GitLab: authenticated user could permanently delete existingGitLabCVE-2026-112326fixed in 19.3.6 +2 Low 2.3Oct 21

Apache Pulsar: missing authorizationApache PulsarCVE-2026-105931fixed in 4.0.14 +1 Low 2.3Oct 21

Apache Pulsar: improper authorizationApache PulsarCVE-2026-105927fixed in 4.0.14 +1 Low 2.3Oct 21

EnterpriseDB WarehousePG: missing authorizationWarehousePGCVE-2026-104949fixed in 6.27.7 +1 Low 3.3Oct 21

Acronis Cyber Infrastructure: information disclosureAcronis Cyber InfrastructureCVE-2026-87096fixed in 6.0.1-112 +2 Low 3.3Oct 21

Red Hat Confidential Compute Attestation: resource leakConfidential Compute AttestationCVE-2026-114236no fix yet Low 3.7Oct 20

Oracle Essbase: information disclosureOracle EssbaseCVE-2026-91650no fix yet Low 3.9Oct 20

Siebel CRM Deployment: data tampering via Server InfrastructureSiebel CRM DeploymentCVE-2026-91436no fix yet Low 2.3Oct 20

Siebel CRM Deployment: flaw in Server InfrastructureSiebel CRM DeploymentCVE-2026-91427no fix yet Low 3.1Oct 20

Oracle Java SE: flaw in SoundOracle Java SECVE-2026-91400no fix yet Low 3.7Oct 20

Siebel CRM End User: data exposure via Open UISiebel CRM End UserCVE-2026-91391no fix yet Low 3.7Oct 20

Siebel CRM End User: data tampering via Open UISiebel CRM End UserCVE-2026-91392no fix yet Low 3.1Oct 20

Siebel CRM End User: data tampering via Open UISiebel CRM End UserCVE-2026-91393no fix yet Low 3.3Oct 20

Siebel CRM Cloud Applications: data exposure via Siebel Cloud ManagerSiebel CRM Cloud ApplicationsCVE-2026-91372no fix yet Low 3.7Oct 20

Siebel CRM Cloud Applications: data exposure via Siebel Cloud ManagerSiebel CRM Cloud ApplicationsCVE-2026-91363no fix yet Low 3.3Oct 20

JD Edwards EnterpriseOne Tools: flaw in Installation SecurityJD Edwards EnterpriseOne ToolsCVE-2026-91330no fix yet Low 3.8Oct 20

PeopleSoft Enterprise CC Common Application Objects: data tampering via Common...PeopleSoft Enterprise CC Common Application ObjectsCVE-2026-91331no fix yet Low 3.7Oct 20

Oracle Java SE: unsafe deserializationOracle Java SECVE-2026-91333no fix yet Low 3.7Oct 20

Oracle Java SE: data exposure via ImageIOOracle Java SECVE-2026-91334no fix yet Low 2.6Oct 20

Oracle Java SE: data exposure via AWTOracle Java SECVE-2026-91335no fix yet Low 3.3Oct 20

Oracle JDeveloper: data exposure via Oracle JDeveloperOracle JDeveloperCVE-2026-91322no fix yet Low 3.1Oct 20

JD Edwards EnterpriseOne Tools: data tampering via Web Runtime SECJD Edwards EnterpriseOne ToolsCVE-2026-91300no fix yet Low 3.6Oct 20

JD Edwards EnterpriseOne Tools: data tampering via Monitoring and Diagnostics...JD Edwards EnterpriseOne ToolsCVE-2026-91301no fix yet Low 3.3Oct 20

JD Edwards EnterpriseOne Tools: flaw in Enterprise Infrastructure SECJD Edwards EnterpriseOne ToolsCVE-2026-91302no fix yet Low 3.6Oct 20

JD Edwards EnterpriseOne Tools: data tampering via Business Logic Infra SECJD Edwards EnterpriseOne ToolsCVE-2026-91291no fix yet Low 3.1Oct 20

Oracle WebCenter Content: data exposure via Content ServerOracle WebCenter ContentCVE-2026-91261no fix yet Low 3.7Oct 20

PeopleSoft Enterprise SCM Manufacturing: data tampering via SecurityPeopleSoft Enterprise SCM ManufacturingCVE-2026-91264no fix yet Low 3.3Oct 20

Oracle Solaris: data exposure via LibrariesOracle SolarisCVE-2026-91249no fix yet Low 3.7Oct 20

PeopleSoft Enterprise PeopleTools: data exposure via Report DistributionPeopleSoft Enterprise PeopleToolsCVE-2026-87416no fix yet Low 2.5Oct 20

PeopleSoft Enterprise PeopleTools: data exposure via Updates Environment MgmtPeopleSoft Enterprise PeopleToolsCVE-2026-87418no fix yet Low 2.7Oct 20

PeopleSoft Enterprise PeopleTools: data exposure via Report DistributionPeopleSoft Enterprise PeopleToolsCVE-2026-87412no fix yet Low 3.3Oct 20

PeopleSoft Enterprise PeopleTools: data exposure via XML PublisherPeopleSoft Enterprise PeopleToolsCVE-2026-87401no fix yet Low 3.7Oct 20

JD Edwards EnterpriseOne Human Resources Management: data tampering via Human...JD Edwards EnterpriseOne Human Resources ManagementCVE-2026-87389no fix yet Low 3.7Oct 20

Oracle Java SE: data tampering via JAXPOracle Java SECVE-2026-87367no fix yet Low 3.1Oct 20

Siebel CRM Integration: data exposure via RESTSiebel CRM IntegrationCVE-2026-87339no fix yet