CVE-2026-79704 is an out-of-bounds read vulnerability in Apache bRPC's streaming RPC client versions 1.11.0 through 1.17.0. The flaw occurs when a client creates multiple streams in a single RPC and the server response contains fewer extra_stream_ids than expected. This mismatch leads to an out-of-bounds read, potentially causing client crashes (denial of service) or unintended memory disclosure. The issue affects clients connecting to untrusted or malicious servers or networks. The vulnerability is fixed in version 1.18.0, which rejects malformed responses.
Astral uv versions 0.9.17+ds1-3 through 0.9.17+ds1-6 contain a path traversal vulnerability that could allow an attacker to access files outside the intended directory. This vulnerability has a medium severity with a CVSS score of 5.3. No public exploit code or active exploitation in the wild has been reported. The vulnerability affects specific versions prior to 0.11.6.
The uv software versions before 0.11.15 contain a path traversal vulnerability that can be exploited to compromise system confidentiality, integrity, and availability. This vulnerability is rated high severity with a CVSS score of 8.8. The affected versions include specific builds of 0.9.17+ds1-3 through 0.9.17+ds1-6. No public exploits or vendor patch information is provided in the data.
Astral uv versions before 0.8.22 contain a path traversal vulnerability that allows unauthorized modification of data. This vulnerability has a CVSS score of 6.5, indicating a medium severity level. The affected versions include specific builds of version 0.9.17+ds1. There is no indication of public exploits or active exploitation in the wild. No patch or remediation details are provided in the available data.
CVE-2026-91450 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, or modify critical data or gain unauthorized access to all accessible data within Siebel CRM Deployment. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.4, reflecting high confidentiality and integrity impacts but no availability impact. The vulnerability is considered difficult to exploit due to the required conditions.
CVE-2026-91449 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all accessible data within Siebel CRM Deployment. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.4, reflecting high confidentiality and integrity impacts but no availability impact.
CVE-2026-91448 is a vulnerability in the Oracle Siebel CRM Deployment product affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact but no impact on integrity or availability.
CVE-2026-91447 is a vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has published a Critical Patch Update advisory that includes patches addressing this and other vulnerabilities.
CVE-2026-91446 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability. Oracle has released patches as part of their October 2026 Critical Patch Update, and customers are strongly advised to apply these patches promptly.
CVE-2026-91445 is a high-severity vulnerability in Oracle Siebel CRM End User component Communications Panel/Dashboard affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes on accessible data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high impact on confidentiality and some impact on integrity. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities, strongly recommending patch application. No specific patch link for this CVE was provided, but the advisory indicates patches are available for affected products. There are no known exploits in the wild at this time.
CVE-2026-91444 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a high privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment component, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability.
CVE-2026-91443 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within Siebel CRM Deployment. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity primarily impacting confidentiality. No public exploits or confirmed in-the-wild exploitation are reported. Oracle has released patches as part of its October 2026 Critical Patch Update and strongly recommends applying these patches promptly.
CVE-2026-91442 is a high-severity vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to fully compromise the Siebel CRM Deployment, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 8.8. Oracle has released patches for this and other vulnerabilities in their October 2026 Critical Patch Update advisory.
CVE-2026-91441 is a vulnerability in Oracle Siebel CRM's Customer Order Management component affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to perform unauthorized read, insert, update, or delete operations on accessible data and cause partial denial of service. Exploitation requires user interaction by a person other than the attacker. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 6.5.
CVE-2026-91440 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read and write operations on accessible data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity with impacts on confidentiality and integrity but no impact on availability. Oracle has published a Critical Patch Update advisory that includes patches for this and other vulnerabilities.
CVE-2026-91439 is a vulnerability in Oracle Siebel CRM Deployment's Server Infrastructure component affecting versions 17.0 through 26.9. It allows a low privileged attacker with logon access to the infrastructure to compromise the Siebel CRM Deployment, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact.
CVE-2026-91438 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes on accessible data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and integrity impacts.
CVE-2026-91437 is a high-severity vulnerability in Oracle Siebel CRM Deployment (versions 17.0 through 26.9) that allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 8.7. Oracle has published a Critical Patch Update advisory addressing this and other vulnerabilities, recommending customers apply patches promptly.
CVE-2026-91436 is a vulnerability in Oracle Siebel CRM Deployment Server Infrastructure affecting versions 17.0 through 26.9. It requires high privileges and local access, making exploitation difficult. Successful exploitation could allow unauthorized read, insert, update, or delete access to some accessible data and cause a partial denial of service. The CVSS 3.1 base score is 3.9, indicating low severity.
CVE-2026-91435 is a vulnerability in Oracle Siebel CRM Deployment versions 17.0 through 26.9. It allows a low privileged attacker with network access via HTTP to cause a denial of service by hanging or crashing the Siebel CRM Deployment server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity level. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains multiple security patches across various products.