# CVEs published 2026-08-18

1,405 CVEs were published on August 18, 2026: 225 critical, 736 high. Days are UTC.

- [CVE-2026-75976](https://cve.now/CVE-2026-75976.md): TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow (CVSS 9.4, TRENDnet TEW-823DRU)
- [CVE-2025-11729](https://cve.now/CVE-2025-11729.md): PPWP: Password Protect Pages, Posts & Full or Partial Content \<= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master… (CVSS 4.3, buildwps PPWP – Password Protect Pages)
- [CVE-2026-27365](https://cve.now/CVE-2026-27365.md): WordPress PublishPress Series plugin \<= 2.17.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, PublishPress Series)
- [CVE-2026-66589](https://cve.now/CVE-2026-66589.md): WordPress B2BKing plugin \<= 5.2.30 - Broken Access Control vulnerability (CVSS 5.4, Kings Plugins B2BKing)
- [CVE-2026-66591](https://cve.now/CVE-2026-66591.md): WordPress Media LIbrary Assistant plugin \<= 3.39 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, David Lingren Media LIbrary Assistant)
- [CVE-2026-66602](https://cve.now/CVE-2026-66602.md): WordPress HashBar – WordPress Notification Bar plugin \<= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, DevItems HashBar – WordPress Notification Bar)
- [CVE-2026-66603](https://cve.now/CVE-2026-66603.md): WordPress Draft List plugin \<= 2.6.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, David Artiss Draft List)
- [CVE-2026-21584](https://cve.now/CVE-2026-21584.md): This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of… (CVSS 7.6, Atlassian Bamboo Data Center)
- [CVE-2026-21582](https://cve.now/CVE-2026-21582.md): This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1… (CVSS 8.8, Atlassian Crowd Data Center)
- [CVE-2026-21580](https://cve.now/CVE-2026-21580.md): This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions… (CVSS 8.6, Atlassian Confluence Data Center · Atlassian Confluence Ser…)
- [CVE-2026-53959](https://cve.now/CVE-2026-53959.md): 4gaBoards: Mass Information Disclosure (Internal PII Leakage) on /api/users to any authenticated user (CVSS 6.5, RARgames 4gaBoards)
- [CVE-2026-53958](https://cve.now/CVE-2026-53958.md): 4gaBoards: SSO Pre-Account Takeover / Hijacking via Mass Assignment (CVSS 7.6, RARgames 4gaBoards)
- [CVE-2026-50186](https://cve.now/CVE-2026-50186.md): 4gaBoards: Path Traversal leading to Arbitrary File Read and Deletion in Board Export (CVSS 8.8, RARgames 4gaBoards)
- [CVE-2026-50191](https://cve.now/CVE-2026-50191.md): 4gaBoards: Pre-Account Takeover via SSO Email Linkage (CVSS 8.8, RARgames 4gaBoards)
- [CVE-2026-52854](https://cve.now/CVE-2026-52854.md): mediawiki/maps: Stored XSS through the overlays parameter in the display\_map parser function (CVSS 8.6, ProfessionalWiki Maps · mediawiki/maps)
- [CVE-2026-52875](https://cve.now/CVE-2026-52875.md): Streambert: Arbitrary Directory Creation and File Manipulation via Backup Handler (CVSS 8.4, truelockmc streambert)
- [CVE-2026-52876](https://cve.now/CVE-2026-52876.md): Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback (CVSS 8.8, truelockmc streambert)
- [CVE-2026-52873](https://cve.now/CVE-2026-52873.md): Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained XSS in Electron Renderer (CVSS 6.9, truelockmc streambert)
- [CVE-2026-52877](https://cve.now/CVE-2026-52877.md): Streambert : Insecure Protocol Execution in open-external IPC Handler (CVSS 8.3, truelockmc streambert)
- [CVE-2026-52872](https://cve.now/CVE-2026-52872.md): Streambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol (CVSS 8.8, truelockmc streambert)
- [CVE-2026-15316](https://cve.now/CVE-2026-15316.md): Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200 (CVSS 7.1, TP-Link Systems Tapo C200)
- [CVE-2026-15315](https://cve.now/CVE-2026-15315.md): Unauthenticated Administrative Authentication Bypass via device\_confirm Replay in TP-Link Tapo C120 and C200 (CVSS 8.7, TP-Link Systems Tapo C200 · TP-Link Systems Tapo C120)
- [CVE-2026-47699](https://cve.now/CVE-2026-47699.md): Confidential Containers Guest Components image-rs: zip-slip-class arbitrary file write via absolute entry path in hardlink fallback (CVSS 6.4, confidential-containers guest-components)
- [CVE-2026-62377](https://cve.now/CVE-2026-62377.md): libheif: Reachable assertion in HeifContext::get\_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110) (CVSS 4.3, strukturag libheif)
- [CVE-2026-62291](https://cve.now/CVE-2026-62291.md): libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions (CVSS 5.3, strukturag libheif)
- [CVE-2026-62292](https://cve.now/CVE-2026-62292.md): libheif: Out-of-bounds read in uncompressed unci tile range slicing (CVSS 8.7, strukturag libheif)
- [CVE-2026-62289](https://cve.now/CVE-2026-62289.md): libheif: Integer underflow in Fraction constructor via double clap transform application (CVSS 4.3, strukturag libheif)
- [CVE-2026-50142](https://cve.now/CVE-2026-50142.md): libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check) (CVSS 7.5, strukturag libheif)
- [CVE-2026-48796](https://cve.now/CVE-2026-48796.md): CefSharp: \`FolderSchemeHandlerFactory\` path boundary check can expose files outside the configured root folder (CVSS 5.3, CefSharp · CefSharp.Common)
- [CVE-2026-73974](https://cve.now/CVE-2026-73974.md): linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE) (CVSS 5.5, Linuxfabrik monitoring-plugins · Linuxfabrik lib +1)
- [CVE-2026-73973](https://cve.now/CVE-2026-73973.md): Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE) (CVSS 5.5, Linuxfabrik monitoring-plugins)
- [CVE-2026-41921](https://cve.now/CVE-2026-41921.md): Koha Stored XSS via Purchase Suggestion Handler (CVSS 5.1, Koha Community Koha)
- [CVE-2026-73939](https://cve.now/CVE-2026-73939.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.6, Oracle Helidon)
- [CVE-2026-73938](https://cve.now/CVE-2026-73938.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73937](https://cve.now/CVE-2026-73937.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.2, Oracle Helidon)
- [CVE-2026-73936](https://cve.now/CVE-2026-73936.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73935](https://cve.now/CVE-2026-73935.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73934](https://cve.now/CVE-2026-73934.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73933](https://cve.now/CVE-2026-73933.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.3, Oracle Helidon)
- [CVE-2026-73932](https://cve.now/CVE-2026-73932.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73931](https://cve.now/CVE-2026-73931.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.3, Oracle Helidon)
- [CVE-2026-73930](https://cve.now/CVE-2026-73930.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.9, Oracle Helidon)
- [CVE-2026-73929](https://cve.now/CVE-2026-73929.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.3, Oracle Helidon)
- [CVE-2026-73928](https://cve.now/CVE-2026-73928.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73927](https://cve.now/CVE-2026-73927.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73925](https://cve.now/CVE-2026-73925.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.2, Oracle Helidon)
- [CVE-2026-73924](https://cve.now/CVE-2026-73924.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73923](https://cve.now/CVE-2026-73923.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 3.7, Oracle Helidon)
- [CVE-2026-73922](https://cve.now/CVE-2026-73922.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73921](https://cve.now/CVE-2026-73921.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-73920](https://cve.now/CVE-2026-73920.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.4, Oracle Helidon)
- [CVE-2026-73919](https://cve.now/CVE-2026-73919.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73918](https://cve.now/CVE-2026-73918.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.3, Oracle Helidon)
- [CVE-2026-73917](https://cve.now/CVE-2026-73917.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73916](https://cve.now/CVE-2026-73916.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73915](https://cve.now/CVE-2026-73915.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73914](https://cve.now/CVE-2026-73914.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73913](https://cve.now/CVE-2026-73913.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73912](https://cve.now/CVE-2026-73912.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-73911](https://cve.now/CVE-2026-73911.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73910](https://cve.now/CVE-2026-73910.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73909](https://cve.now/CVE-2026-73909.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.9, Oracle Helidon)
- [CVE-2026-73908](https://cve.now/CVE-2026-73908.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73907](https://cve.now/CVE-2026-73907.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73906](https://cve.now/CVE-2026-73906.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73905](https://cve.now/CVE-2026-73905.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-73904](https://cve.now/CVE-2026-73904.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73903](https://cve.now/CVE-2026-73903.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73902](https://cve.now/CVE-2026-73902.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73901](https://cve.now/CVE-2026-73901.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 4.8, Oracle Helidon)
- [CVE-2026-73900](https://cve.now/CVE-2026-73900.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73899](https://cve.now/CVE-2026-73899.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73898](https://cve.now/CVE-2026-73898.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-73897](https://cve.now/CVE-2026-73897.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73896](https://cve.now/CVE-2026-73896.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73895](https://cve.now/CVE-2026-73895.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73894](https://cve.now/CVE-2026-73894.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.3, Oracle Helidon)
- [CVE-2026-73893](https://cve.now/CVE-2026-73893.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73892](https://cve.now/CVE-2026-73892.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73891](https://cve.now/CVE-2026-73891.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.3, Oracle Helidon)
- [CVE-2026-73890](https://cve.now/CVE-2026-73890.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73889](https://cve.now/CVE-2026-73889.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73888](https://cve.now/CVE-2026-73888.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73887](https://cve.now/CVE-2026-73887.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73886](https://cve.now/CVE-2026-73886.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73885](https://cve.now/CVE-2026-73885.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73884](https://cve.now/CVE-2026-73884.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73883](https://cve.now/CVE-2026-73883.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73882](https://cve.now/CVE-2026-73882.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73881](https://cve.now/CVE-2026-73881.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73880](https://cve.now/CVE-2026-73880.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 4.4, Oracle Helidon)
- [CVE-2026-73879](https://cve.now/CVE-2026-73879.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73878](https://cve.now/CVE-2026-73878.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73877](https://cve.now/CVE-2026-73877.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73876](https://cve.now/CVE-2026-73876.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73875](https://cve.now/CVE-2026-73875.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73874](https://cve.now/CVE-2026-73874.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73873](https://cve.now/CVE-2026-73873.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 4.2, Oracle Helidon)
- [CVE-2026-73872](https://cve.now/CVE-2026-73872.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73871](https://cve.now/CVE-2026-73871.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73870](https://cve.now/CVE-2026-73870.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-73869](https://cve.now/CVE-2026-73869.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-73868](https://cve.now/CVE-2026-73868.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73867](https://cve.now/CVE-2026-73867.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73866](https://cve.now/CVE-2026-73866.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73865](https://cve.now/CVE-2026-73865.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-71167](https://cve.now/CVE-2026-71167.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.4, Oracle Helidon)
- [CVE-2026-71166](https://cve.now/CVE-2026-71166.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.4, Oracle Helidon)
- [CVE-2026-71165](https://cve.now/CVE-2026-71165.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-71164](https://cve.now/CVE-2026-71164.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-71162](https://cve.now/CVE-2026-71162.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-71161](https://cve.now/CVE-2026-71161.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-71160](https://cve.now/CVE-2026-71160.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-71159](https://cve.now/CVE-2026-71159.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.2, Oracle Helidon)
- [CVE-2026-71158](https://cve.now/CVE-2026-71158.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-71157](https://cve.now/CVE-2026-71157.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-71156](https://cve.now/CVE-2026-71156.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-71155](https://cve.now/CVE-2026-71155.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.5, Oracle Helidon)
- [CVE-2026-71154](https://cve.now/CVE-2026-71154.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-71153](https://cve.now/CVE-2026-71153.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-71152](https://cve.now/CVE-2026-71152.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-71151](https://cve.now/CVE-2026-71151.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.6, Oracle VM VirtualBox)
- [CVE-2026-71150](https://cve.now/CVE-2026-71150.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-71149](https://cve.now/CVE-2026-71149.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.2, Oracle Hyperion Financial Management)
- [CVE-2026-71148](https://cve.now/CVE-2026-71148.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-71147](https://cve.now/CVE-2026-71147.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.2, Oracle Hyperion Financial Management)
- [CVE-2026-71146](https://cve.now/CVE-2026-71146.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 1.9, Oracle Hyperion Financial Management)
- [CVE-2026-71145](https://cve.now/CVE-2026-71145.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.4, Oracle Hyperion Financial Management)
- [CVE-2026-71144](https://cve.now/CVE-2026-71144.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.0, Oracle Hyperion Financial Management)
- [CVE-2026-71143](https://cve.now/CVE-2026-71143.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Third Party). (CVSS 7.4, Oracle Communications Unified Inventory Management)
- [CVE-2026-71142](https://cve.now/CVE-2026-71142.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security Component). (CVSS 7.5, Oracle Communications Unified Inventory Management)
- [CVE-2026-71141](https://cve.now/CVE-2026-71141.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.7, Oracle VM VirtualBox)
- [CVE-2026-71140](https://cve.now/CVE-2026-71140.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.4, Oracle VM VirtualBox)
- [CVE-2026-71139](https://cve.now/CVE-2026-71139.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2026-71138](https://cve.now/CVE-2026-71138.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.3, Oracle VM VirtualBox)
- [CVE-2026-71137](https://cve.now/CVE-2026-71137.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71136](https://cve.now/CVE-2026-71136.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.3, Oracle VM VirtualBox)
- [CVE-2026-71135](https://cve.now/CVE-2026-71135.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71134](https://cve.now/CVE-2026-71134.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.7, Oracle VM VirtualBox)
- [CVE-2026-71132](https://cve.now/CVE-2026-71132.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2026-71131](https://cve.now/CVE-2026-71131.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.6, Oracle VM VirtualBox)
- [CVE-2026-71130](https://cve.now/CVE-2026-71130.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2026-71129](https://cve.now/CVE-2026-71129.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2026-71128](https://cve.now/CVE-2026-71128.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71127](https://cve.now/CVE-2026-71127.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71126](https://cve.now/CVE-2026-71126.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2026-71125](https://cve.now/CVE-2026-71125.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.1, Oracle VM VirtualBox)
- [CVE-2026-71124](https://cve.now/CVE-2026-71124.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authorization Engine). (CVSS 4.3, Oracle Access Manager)
- [CVE-2026-71123](https://cve.now/CVE-2026-71123.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.4, Oracle Hyperion Financial Management)
- [CVE-2026-71122](https://cve.now/CVE-2026-71122.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 8.0, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71121](https://cve.now/CVE-2026-71121.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-71120](https://cve.now/CVE-2026-71120.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-71119](https://cve.now/CVE-2026-71119.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.4, Oracle Hyperion Financial Management)
- [CVE-2026-71118](https://cve.now/CVE-2026-71118.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.8, Oracle Hyperion Financial Management)
- [CVE-2026-71117](https://cve.now/CVE-2026-71117.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-71116](https://cve.now/CVE-2026-71116.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-71115](https://cve.now/CVE-2026-71115.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71114](https://cve.now/CVE-2026-71114.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71113](https://cve.now/CVE-2026-71113.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-71112](https://cve.now/CVE-2026-71112.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security). (CVSS 8.1, Oracle PeopleSoft Enterprise FIN Common Objects)
- [CVE-2026-71111](https://cve.now/CVE-2026-71111.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). (CVSS 7.8, Oracle Identity Manager)
- [CVE-2026-71110](https://cve.now/CVE-2026-71110.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.1, Oracle Helidon)
- [CVE-2026-71109](https://cve.now/CVE-2026-71109.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.7, Oracle Hyperion Financial Management)
- [CVE-2026-71108](https://cve.now/CVE-2026-71108.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-71107](https://cve.now/CVE-2026-71107.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). (CVSS 7.5, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71106](https://cve.now/CVE-2026-71106.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera Servlet). (CVSS 8.8, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2026-71105](https://cve.now/CVE-2026-71105.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.7, Oracle Hyperion Financial Management)
- [CVE-2026-71104](https://cve.now/CVE-2026-71104.md): Vulnerability in the Oracle HRMS (Netherlands) product of Oracle E-Business Suite (component: Netherlands Payroll). (CVSS 7.2, Oracle HRMS)
- [CVE-2026-71103](https://cve.now/CVE-2026-71103.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.3, Oracle Hyperion Financial Management)
- [CVE-2026-71102](https://cve.now/CVE-2026-71102.md): Vulnerability in the Portable Clusterware component of Oracle Database Server. (CVSS 9.1, Oracle Database Server)
- [CVE-2026-71101](https://cve.now/CVE-2026-71101.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Tax Issues). (CVSS 7.8, Oracle HRMS)
- [CVE-2026-71100](https://cve.now/CVE-2026-71100.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 5.3, Oracle Database Server)
- [CVE-2026-71099](https://cve.now/CVE-2026-71099.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). (CVSS 7.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71098](https://cve.now/CVE-2026-71098.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 7.0, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71097](https://cve.now/CVE-2026-71097.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 7.8, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71096](https://cve.now/CVE-2026-71096.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 8.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71095](https://cve.now/CVE-2026-71095.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 8.3, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71094](https://cve.now/CVE-2026-71094.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). (CVSS 7.3, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71092](https://cve.now/CVE-2026-71092.md): Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft (component: Lease Administration). (CVSS 7.5, Oracle PeopleSoft Enterprise FIN Lease Administration)
- [CVE-2026-71091](https://cve.now/CVE-2026-71091.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-71090](https://cve.now/CVE-2026-71090.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.4, Oracle Hyperion Financial Management)
- [CVE-2026-71089](https://cve.now/CVE-2026-71089.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 3.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71088](https://cve.now/CVE-2026-71088.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 4.8, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71087](https://cve.now/CVE-2026-71087.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 5.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71085](https://cve.now/CVE-2026-71085.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.9, Oracle Hyperion Financial Management)
- [CVE-2026-71084](https://cve.now/CVE-2026-71084.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). (CVSS 6.8, Oracle MySQL Connectors)
- [CVE-2026-71083](https://cve.now/CVE-2026-71083.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 1.8, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71082](https://cve.now/CVE-2026-71082.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 2.5, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71081](https://cve.now/CVE-2026-71081.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 1.9, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71080](https://cve.now/CVE-2026-71080.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 3.7, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71079](https://cve.now/CVE-2026-71079.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). (CVSS 6.5, Oracle MySQL Connectors)
- [CVE-2026-71078](https://cve.now/CVE-2026-71078.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 4.2, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71077](https://cve.now/CVE-2026-71077.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 5.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71076](https://cve.now/CVE-2026-71076.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 5.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71075](https://cve.now/CVE-2026-71075.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 5.9, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71074](https://cve.now/CVE-2026-71074.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-71073](https://cve.now/CVE-2026-71073.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). (CVSS 5.5, Oracle MySQL Connectors)
- [CVE-2026-71072](https://cve.now/CVE-2026-71072.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 3.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71071](https://cve.now/CVE-2026-71071.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 4.6, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71070](https://cve.now/CVE-2026-71070.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 6.5, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71069](https://cve.now/CVE-2026-71069.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 7.5, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71068](https://cve.now/CVE-2026-71068.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 8.1, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71067](https://cve.now/CVE-2026-71067.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 8.8, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71066](https://cve.now/CVE-2026-71066.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 4.5, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71065](https://cve.now/CVE-2026-71065.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.3, Oracle Helidon)
- [CVE-2026-71064](https://cve.now/CVE-2026-71064.md): Vulnerability in the Portable Clusterware component of Oracle Database Server. (CVSS 9.6, Oracle Database Server)
- [CVE-2026-71063](https://cve.now/CVE-2026-71063.md): Vulnerability in the Portable Clusterware component of Oracle Database Server. (CVSS 9.6, Oracle Database Server)
- [CVE-2026-71062](https://cve.now/CVE-2026-71062.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 8.5, Oracle Database Server)
- [CVE-2026-71061](https://cve.now/CVE-2026-71061.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 7.5, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71060](https://cve.now/CVE-2026-71060.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.4, Oracle Hyperion Financial Management)
- [CVE-2026-71059](https://cve.now/CVE-2026-71059.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). (CVSS 9.9, Oracle BI Publisher)
- [CVE-2026-71058](https://cve.now/CVE-2026-71058.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). (CVSS 8.8, Oracle BI Publisher)
- [CVE-2026-71057](https://cve.now/CVE-2026-71057.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). (CVSS 8.5, Oracle BI Publisher)
- [CVE-2026-71056](https://cve.now/CVE-2026-71056.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). (CVSS 7.7, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71055](https://cve.now/CVE-2026-71055.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 8.8, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71053](https://cve.now/CVE-2026-71053.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). (CVSS 8.1, Oracle Agile Engineering Data Management)
- [CVE-2026-71052](https://cve.now/CVE-2026-71052.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). (CVSS 8.8, Oracle Agile Engineering Data Management)
- [CVE-2026-71051](https://cve.now/CVE-2026-71051.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 8.8, Oracle Product Lifecycle Analytics)
- [CVE-2026-71050](https://cve.now/CVE-2026-71050.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 8.7, Oracle Product Lifecycle Analytics)
- [CVE-2026-71049](https://cve.now/CVE-2026-71049.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 8.5, Oracle Product Lifecycle Analytics)
- [CVE-2026-71048](https://cve.now/CVE-2026-71048.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 7.6, Oracle Product Lifecycle Analytics)
- [CVE-2026-71046](https://cve.now/CVE-2026-71046.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-71045](https://cve.now/CVE-2026-71045.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-71044](https://cve.now/CVE-2026-71044.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-71043](https://cve.now/CVE-2026-71043.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 7.5, Oracle Agile PLM)
- [CVE-2026-71042](https://cve.now/CVE-2026-71042.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin). (CVSS 8.1, Oracle Agile PLM)
- [CVE-2026-71041](https://cve.now/CVE-2026-71041.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart). (CVSS 7.0, Oracle Agile PLM)
- [CVE-2026-71040](https://cve.now/CVE-2026-71040.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 9.8, Oracle Agile PLM)
- [CVE-2026-71039](https://cve.now/CVE-2026-71039.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-71038](https://cve.now/CVE-2026-71038.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71037](https://cve.now/CVE-2026-71037.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 9.3, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71036](https://cve.now/CVE-2026-71036.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71035](https://cve.now/CVE-2026-71035.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). (CVSS 8.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71034](https://cve.now/CVE-2026-71034.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71033](https://cve.now/CVE-2026-71033.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 5.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71032](https://cve.now/CVE-2026-71032.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 7.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71031](https://cve.now/CVE-2026-71031.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71030](https://cve.now/CVE-2026-71030.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 7.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71029](https://cve.now/CVE-2026-71029.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.8, Oracle Helidon)
- [CVE-2026-71028](https://cve.now/CVE-2026-71028.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 7.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71027](https://cve.now/CVE-2026-71027.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 7.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71026](https://cve.now/CVE-2026-71026.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71025](https://cve.now/CVE-2026-71025.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71024](https://cve.now/CVE-2026-71024.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). (CVSS 8.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71023](https://cve.now/CVE-2026-71023.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71022](https://cve.now/CVE-2026-71022.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). (CVSS 7.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71021](https://cve.now/CVE-2026-71021.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 7.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71020](https://cve.now/CVE-2026-71020.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 7.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71019](https://cve.now/CVE-2026-71019.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal… (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71018](https://cve.now/CVE-2026-71018.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 8.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71017](https://cve.now/CVE-2026-71017.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 6.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71016](https://cve.now/CVE-2026-71016.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 8.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71015](https://cve.now/CVE-2026-71015.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71014](https://cve.now/CVE-2026-71014.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71013](https://cve.now/CVE-2026-71013.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.0, Oracle Hyperion Financial Management)
- [CVE-2026-71012](https://cve.now/CVE-2026-71012.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 7.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71011](https://cve.now/CVE-2026-71011.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71010](https://cve.now/CVE-2026-71010.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 7.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71009](https://cve.now/CVE-2026-71009.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 7.4, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71008](https://cve.now/CVE-2026-71008.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71007](https://cve.now/CVE-2026-71007.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71006](https://cve.now/CVE-2026-71006.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71005](https://cve.now/CVE-2026-71005.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71004](https://cve.now/CVE-2026-71004.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71003](https://cve.now/CVE-2026-71003.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 7.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71002](https://cve.now/CVE-2026-71002.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 8.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71001](https://cve.now/CVE-2026-71001.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 6.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71000](https://cve.now/CVE-2026-71000.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 8.7, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70999](https://cve.now/CVE-2026-70999.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 8.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70998](https://cve.now/CVE-2026-70998.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 9.3, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70997](https://cve.now/CVE-2026-70997.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70996](https://cve.now/CVE-2026-70996.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 8.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70995](https://cve.now/CVE-2026-70995.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 9.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70994](https://cve.now/CVE-2026-70994.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70993](https://cve.now/CVE-2026-70993.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 8.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70992](https://cve.now/CVE-2026-70992.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 7.0, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70991](https://cve.now/CVE-2026-70991.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 6.3, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70990](https://cve.now/CVE-2026-70990.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70989](https://cve.now/CVE-2026-70989.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 6.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70988](https://cve.now/CVE-2026-70988.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 7.7, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70987](https://cve.now/CVE-2026-70987.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70986](https://cve.now/CVE-2026-70986.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70985](https://cve.now/CVE-2026-70985.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70984](https://cve.now/CVE-2026-70984.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70983](https://cve.now/CVE-2026-70983.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70982](https://cve.now/CVE-2026-70982.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70981](https://cve.now/CVE-2026-70981.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70980](https://cve.now/CVE-2026-70980.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 9.0, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70979](https://cve.now/CVE-2026-70979.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70978](https://cve.now/CVE-2026-70978.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70977](https://cve.now/CVE-2026-70977.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70976](https://cve.now/CVE-2026-70976.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content… (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70975](https://cve.now/CVE-2026-70975.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70974](https://cve.now/CVE-2026-70974.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-70973](https://cve.now/CVE-2026-70973.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70972](https://cve.now/CVE-2026-70972.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70971](https://cve.now/CVE-2026-70971.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70970](https://cve.now/CVE-2026-70970.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 9.8, Oracle WebCenter Portal)
- [CVE-2026-70969](https://cve.now/CVE-2026-70969.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70968](https://cve.now/CVE-2026-70968.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70967](https://cve.now/CVE-2026-70967.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70966](https://cve.now/CVE-2026-70966.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70965](https://cve.now/CVE-2026-70965.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70964](https://cve.now/CVE-2026-70964.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.2, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70963](https://cve.now/CVE-2026-70963.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 4.2, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70962](https://cve.now/CVE-2026-70962.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70961](https://cve.now/CVE-2026-70961.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70960](https://cve.now/CVE-2026-70960.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.6, Oracle Hyperion Financial Management)
- [CVE-2026-70959](https://cve.now/CVE-2026-70959.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70958](https://cve.now/CVE-2026-70958.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.6, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70957](https://cve.now/CVE-2026-70957.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70956](https://cve.now/CVE-2026-70956.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70955](https://cve.now/CVE-2026-70955.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 7.5, Oracle Commerce Platform)
- [CVE-2026-70954](https://cve.now/CVE-2026-70954.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 9.8, Oracle Commerce Platform)
- [CVE-2026-70953](https://cve.now/CVE-2026-70953.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 9.8, Oracle Commerce Platform)
- [CVE-2026-70952](https://cve.now/CVE-2026-70952.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.2, Oracle Hyperion Financial Management)
- [CVE-2026-70951](https://cve.now/CVE-2026-70951.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management). (CVSS 8.8, Oracle Siebel CRM End User)
- [CVE-2026-70950](https://cve.now/CVE-2026-70950.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.2, Oracle Hyperion Financial Management)
- [CVE-2026-70949](https://cve.now/CVE-2026-70949.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 8.8, Oracle Siebel CRM Deployment)
- [CVE-2026-70948](https://cve.now/CVE-2026-70948.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). (CVSS 8.8, Oracle Purchasing)
- [CVE-2026-70947](https://cve.now/CVE-2026-70947.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). (CVSS 7.5, Oracle Purchasing)
- [CVE-2026-70946](https://cve.now/CVE-2026-70946.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-70945](https://cve.now/CVE-2026-70945.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Payroll)
- [CVE-2026-70944](https://cve.now/CVE-2026-70944.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70943](https://cve.now/CVE-2026-70943.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Financial Management)
- [CVE-2026-70942](https://cve.now/CVE-2026-70942.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.7, Oracle Hyperion Financial Management)
- [CVE-2026-70941](https://cve.now/CVE-2026-70941.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Payroll)
- [CVE-2026-70940](https://cve.now/CVE-2026-70940.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70939](https://cve.now/CVE-2026-70939.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.2, Oracle Hyperion Financial Management)
- [CVE-2026-70938](https://cve.now/CVE-2026-70938.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70937](https://cve.now/CVE-2026-70937.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-70936](https://cve.now/CVE-2026-70936.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Financial Management)
- [CVE-2026-70935](https://cve.now/CVE-2026-70935.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Financial Management)
- [CVE-2026-70934](https://cve.now/CVE-2026-70934.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Financial Management)
- [CVE-2026-70933](https://cve.now/CVE-2026-70933.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Financial Management)
- [CVE-2026-70932](https://cve.now/CVE-2026-70932.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 7.2, Oracle Order Management)
- [CVE-2026-70931](https://cve.now/CVE-2026-70931.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 8.1, Oracle Workflow)
- [CVE-2026-70930](https://cve.now/CVE-2026-70930.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 7.5, Oracle Order Management)
- [CVE-2026-70929](https://cve.now/CVE-2026-70929.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Financial Management)
- [CVE-2026-70928](https://cve.now/CVE-2026-70928.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70927](https://cve.now/CVE-2026-70927.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 7.5, Oracle Workflow)
- [CVE-2026-70926](https://cve.now/CVE-2026-70926.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 9.8, Oracle Workflow)
- [CVE-2026-70925](https://cve.now/CVE-2026-70925.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Financial Management)
- [CVE-2026-70924](https://cve.now/CVE-2026-70924.md): Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). (CVSS 8.1, Oracle Web Services Manager)
- [CVE-2026-70923](https://cve.now/CVE-2026-70923.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-70922](https://cve.now/CVE-2026-70922.md): Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications (component… (CVSS 8.8, Oracle Financial Services Enterprise Case Management)
- [CVE-2026-70921](https://cve.now/CVE-2026-70921.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 10.0, Oracle Hyperion Financial Management)
- [CVE-2026-70920](https://cve.now/CVE-2026-70920.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 9.9, Oracle Hyperion Financial Management)
- [CVE-2026-70919](https://cve.now/CVE-2026-70919.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 2.5, Oracle Hyperion Financial Management)
- [CVE-2026-70918](https://cve.now/CVE-2026-70918.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data). (CVSS 8.8, Oracle Product Hub)
- [CVE-2026-70917](https://cve.now/CVE-2026-70917.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.0, Oracle Hyperion Financial Management)
- [CVE-2026-70916](https://cve.now/CVE-2026-70916.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.0, Oracle Hyperion Financial Management)
- [CVE-2026-70914](https://cve.now/CVE-2026-70914.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.0, Oracle Hyperion Financial Management)
- [CVE-2026-70912](https://cve.now/CVE-2026-70912.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-70911](https://cve.now/CVE-2026-70911.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-70910](https://cve.now/CVE-2026-70910.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 7.5, Oracle Siebel CRM Integration)
- [CVE-2026-70909](https://cve.now/CVE-2026-70909.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.2, Oracle Hyperion Financial Management)
- [CVE-2026-70908](https://cve.now/CVE-2026-70908.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-70907](https://cve.now/CVE-2026-70907.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 5.3, Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente…)
- [CVE-2026-70906](https://cve.now/CVE-2026-70906.md): Vulnerability in Oracle Java SE (component: 2D). (CVSS 7.5, Oracle Java SE)
- [CVE-2026-70905](https://cve.now/CVE-2026-70905.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure). (CVSS 9.8, Oracle Access Manager)
- [CVE-2026-70904](https://cve.now/CVE-2026-70904.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70903](https://cve.now/CVE-2026-70903.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.7, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70902](https://cve.now/CVE-2026-70902.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70901](https://cve.now/CVE-2026-70901.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70900](https://cve.now/CVE-2026-70900.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.7, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70899](https://cve.now/CVE-2026-70899.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70898](https://cve.now/CVE-2026-70898.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.4, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70897](https://cve.now/CVE-2026-70897.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70896](https://cve.now/CVE-2026-70896.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70895](https://cve.now/CVE-2026-70895.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 6.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70894](https://cve.now/CVE-2026-70894.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.7, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70893](https://cve.now/CVE-2026-70893.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70892](https://cve.now/CVE-2026-70892.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70891](https://cve.now/CVE-2026-70891.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70890](https://cve.now/CVE-2026-70890.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70889](https://cve.now/CVE-2026-70889.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70888](https://cve.now/CVE-2026-70888.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 6.6, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70887](https://cve.now/CVE-2026-70887.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70886](https://cve.now/CVE-2026-70886.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70885](https://cve.now/CVE-2026-70885.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70884](https://cve.now/CVE-2026-70884.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70883](https://cve.now/CVE-2026-70883.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70882](https://cve.now/CVE-2026-70882.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.7, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70881](https://cve.now/CVE-2026-70881.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70880](https://cve.now/CVE-2026-70880.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 10.0, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70879](https://cve.now/CVE-2026-70879.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70878](https://cve.now/CVE-2026-70878.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70877](https://cve.now/CVE-2026-70877.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70876](https://cve.now/CVE-2026-70876.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70875](https://cve.now/CVE-2026-70875.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70874](https://cve.now/CVE-2026-70874.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70873](https://cve.now/CVE-2026-70873.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70872](https://cve.now/CVE-2026-70872.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70871](https://cve.now/CVE-2026-70871.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70870](https://cve.now/CVE-2026-70870.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Client - Unicode). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70868](https://cve.now/CVE-2026-70868.md): Vulnerability in Oracle Application Testing Suite. (CVSS 8.1, Oracle Application Testing Suite)
- [CVE-2026-70867](https://cve.now/CVE-2026-70867.md): Vulnerability in Oracle Application Testing Suite. (CVSS 7.1, Oracle Application Testing Suite)
- [CVE-2026-70866](https://cve.now/CVE-2026-70866.md): Vulnerability in Oracle Application Testing Suite. (CVSS 7.8, Oracle Application Testing Suite)
- [CVE-2026-70865](https://cve.now/CVE-2026-70865.md): Vulnerability in Oracle Application Testing Suite. (CVSS 7.5, Oracle Application Testing Suite)
- [CVE-2026-70864](https://cve.now/CVE-2026-70864.md): Vulnerability in Oracle Application Testing Suite. (CVSS 7.6, Oracle Application Testing Suite)
- [CVE-2026-70863](https://cve.now/CVE-2026-70863.md): Vulnerability in Oracle Application Testing Suite. (CVSS 8.8, Oracle Application Testing Suite)
- [CVE-2026-70862](https://cve.now/CVE-2026-70862.md): Vulnerability in Oracle Application Testing Suite. (CVSS 9.1, Oracle Application Testing Suite)
- [CVE-2026-70861](https://cve.now/CVE-2026-70861.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). (CVSS 7.2, Oracle PeopleSoft Enterprise FIN Common Objects Brazil)
- [CVE-2026-70859](https://cve.now/CVE-2026-70859.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 8.5, Oracle Siebel CRM Integration)
- [CVE-2026-70858](https://cve.now/CVE-2026-70858.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-70857](https://cve.now/CVE-2026-70857.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 7.7, Oracle Siebel CRM End User)
- [CVE-2026-70856](https://cve.now/CVE-2026-70856.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). (CVSS 7.5, Oracle Siebel CRM Deployment)
- [CVE-2026-70855](https://cve.now/CVE-2026-70855.md): Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). (CVSS 9.3, Oracle Siebel Apps - Self Service)
- [CVE-2026-70854](https://cve.now/CVE-2026-70854.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 9.1, Oracle Hyperion Financial Management)
- [CVE-2026-70853](https://cve.now/CVE-2026-70853.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.3, Oracle Hyperion Financial Management)
- [CVE-2026-70852](https://cve.now/CVE-2026-70852.md): Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). (CVSS 8.2, Oracle Demand Planning)
- [CVE-2026-70851](https://cve.now/CVE-2026-70851.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.1, Oracle Hyperion Financial Management)
- [CVE-2026-70850](https://cve.now/CVE-2026-70850.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.0, Oracle Hyperion Financial Management)
- [CVE-2026-70849](https://cve.now/CVE-2026-70849.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70848](https://cve.now/CVE-2026-70848.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.7, Oracle Hyperion Financial Management)
- [CVE-2026-70847](https://cve.now/CVE-2026-70847.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70846](https://cve.now/CVE-2026-70846.md): Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). (CVSS 9.6, Oracle Demand Planning)
- [CVE-2026-70845](https://cve.now/CVE-2026-70845.md): Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Loans)
- [CVE-2026-70844](https://cve.now/CVE-2026-70844.md): Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Loans)
- [CVE-2026-70843](https://cve.now/CVE-2026-70843.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.8, Oracle Hyperion Financial Management)
- [CVE-2026-70842](https://cve.now/CVE-2026-70842.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.4, Oracle Hyperion Financial Management)
- [CVE-2026-70841](https://cve.now/CVE-2026-70841.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.6, Oracle Hyperion Financial Management)
- [CVE-2026-70840](https://cve.now/CVE-2026-70840.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.4, Oracle Hyperion Financial Management)
- [CVE-2026-70839](https://cve.now/CVE-2026-70839.md): Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Financials for EMEA)
- [CVE-2026-70838](https://cve.now/CVE-2026-70838.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.1, Oracle Hyperion Financial Management)
- [CVE-2026-70837](https://cve.now/CVE-2026-70837.md): Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Financials for Asia/Pacific)
- [CVE-2026-70836](https://cve.now/CVE-2026-70836.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.5, Oracle Hyperion Financial Management)
- [CVE-2026-70835](https://cve.now/CVE-2026-70835.md): Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle iRecruitment)
- [CVE-2026-70834](https://cve.now/CVE-2026-70834.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.2, Oracle Hyperion Financial Management)
- [CVE-2026-70833](https://cve.now/CVE-2026-70833.md): Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Landed Cost Management)
- [CVE-2026-70832](https://cve.now/CVE-2026-70832.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-70831](https://cve.now/CVE-2026-70831.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70830](https://cve.now/CVE-2026-70830.md): Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Systems)
- [CVE-2026-70829](https://cve.now/CVE-2026-70829.md): Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Process Manufacturing Systems)
- [CVE-2026-70828](https://cve.now/CVE-2026-70828.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.7, Oracle Hyperion Financial Management)
- [CVE-2026-70827](https://cve.now/CVE-2026-70827.md): Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle MES for Process Manufacturing)
- [CVE-2026-70826](https://cve.now/CVE-2026-70826.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70825](https://cve.now/CVE-2026-70825.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70824](https://cve.now/CVE-2026-70824.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70823](https://cve.now/CVE-2026-70823.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.4, Oracle Hyperion Financial Management)
- [CVE-2026-70822](https://cve.now/CVE-2026-70822.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-70821](https://cve.now/CVE-2026-70821.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70820](https://cve.now/CVE-2026-70820.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Call Center Technology)
- [CVE-2026-70819](https://cve.now/CVE-2026-70819.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70818](https://cve.now/CVE-2026-70818.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70817](https://cve.now/CVE-2026-70817.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 9.8, Oracle Hyperion Financial Management)
- [CVE-2026-70816](https://cve.now/CVE-2026-70816.md): Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Financials for EMEA)
- [CVE-2026-70815](https://cve.now/CVE-2026-70815.md): Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Internet Procurement Connector)
- [CVE-2026-70814](https://cve.now/CVE-2026-70814.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Call Center Technology)
- [CVE-2026-70813](https://cve.now/CVE-2026-70813.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Call Center Technology)
- [CVE-2026-70812](https://cve.now/CVE-2026-70812.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Call Center Technology)
- [CVE-2026-70811](https://cve.now/CVE-2026-70811.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Purchasing)
- [CVE-2026-70810](https://cve.now/CVE-2026-70810.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Scripting)
- [CVE-2026-70809](https://cve.now/CVE-2026-70809.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Scripting)
- [CVE-2026-70808](https://cve.now/CVE-2026-70808.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Scripting)
- [CVE-2026-70807](https://cve.now/CVE-2026-70807.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.5, Oracle Call Center Technology)
- [CVE-2026-70806](https://cve.now/CVE-2026-70806.md): Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle E-Business Tax)
- [CVE-2026-70805](https://cve.now/CVE-2026-70805.md): Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite (component: Change Management). (CVSS 8.1, Oracle Project Planning and Control)
- [CVE-2026-70804](https://cve.now/CVE-2026-70804.md): Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). (CVSS 7.7, Oracle Public Sector Human Resources)
- [CVE-2026-70803](https://cve.now/CVE-2026-70803.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle General Ledger)
- [CVE-2026-70802](https://cve.now/CVE-2026-70802.md): Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). (CVSS 8.0, Oracle Public Sector Human Resources)
- [CVE-2026-70801](https://cve.now/CVE-2026-70801.md): Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Flow Manufacturing)
- [CVE-2026-70800](https://cve.now/CVE-2026-70800.md): Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.3, Oracle SDP Number Portability)
- [CVE-2026-70799](https://cve.now/CVE-2026-70799.md): Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle SDP Number Portability)
- [CVE-2026-70798](https://cve.now/CVE-2026-70798.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.8, Oracle Purchasing)
- [CVE-2026-70797](https://cve.now/CVE-2026-70797.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Purchasing)
- [CVE-2026-70796](https://cve.now/CVE-2026-70796.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle General Ledger)
- [CVE-2026-70795](https://cve.now/CVE-2026-70795.md): Vulnerability in the Oracle Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). (CVSS 8.1, Oracle Applications Platform Engineering)
- [CVE-2026-70794](https://cve.now/CVE-2026-70794.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 4.7, Oracle Hyperion Financial Reporting)
- [CVE-2026-70793](https://cve.now/CVE-2026-70793.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 4.2, Oracle Hyperion Financial Reporting)
- [CVE-2026-70792](https://cve.now/CVE-2026-70792.md): Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Yard Management)
- [CVE-2026-70791](https://cve.now/CVE-2026-70791.md): Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Transportation Execution)
- [CVE-2026-70790](https://cve.now/CVE-2026-70790.md): Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle Telecommunications Billing Integrator)
- [CVE-2026-70789](https://cve.now/CVE-2026-70789.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.9, Oracle Hyperion Financial Reporting)
- [CVE-2026-70788](https://cve.now/CVE-2026-70788.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-70787](https://cve.now/CVE-2026-70787.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70786](https://cve.now/CVE-2026-70786.md): Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). (CVSS 7.6, Oracle Service Fulfillment Manager)
- [CVE-2026-70785](https://cve.now/CVE-2026-70785.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 3.7, Oracle Hyperion Financial Reporting)
- [CVE-2026-70784](https://cve.now/CVE-2026-70784.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.3, Oracle Hyperion Financial Reporting)
- [CVE-2026-70783](https://cve.now/CVE-2026-70783.md): Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle Service Contracts)
- [CVE-2026-70782](https://cve.now/CVE-2026-70782.md): Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Labor Distribution)
- [CVE-2026-70781](https://cve.now/CVE-2026-70781.md): Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Proposals)
- [CVE-2026-70780](https://cve.now/CVE-2026-70780.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70779](https://cve.now/CVE-2026-70779.md): Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle iSupplier Portal)
- [CVE-2026-70778](https://cve.now/CVE-2026-70778.md): Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.7, Oracle Customer Care)
- [CVE-2026-70777](https://cve.now/CVE-2026-70777.md): Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle iSupplier Portal)
- [CVE-2026-70776](https://cve.now/CVE-2026-70776.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 2.6, Oracle Hyperion Financial Reporting)
- [CVE-2026-70775](https://cve.now/CVE-2026-70775.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). (CVSS 6.3, Oracle Installed Base)
- [CVE-2026-70774](https://cve.now/CVE-2026-70774.md): Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Warehouse Management)
- [CVE-2026-70773](https://cve.now/CVE-2026-70773.md): Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration). (CVSS 8.2, Oracle HCM Common Architecture)
- [CVE-2026-70772](https://cve.now/CVE-2026-70772.md): Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Warehouse Management)
- [CVE-2026-70771](https://cve.now/CVE-2026-70771.md): Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Warehouse Management)
- [CVE-2026-70770](https://cve.now/CVE-2026-70770.md): Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.3, Oracle Warehouse Management)
- [CVE-2026-70769](https://cve.now/CVE-2026-70769.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-70768](https://cve.now/CVE-2026-70768.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70767](https://cve.now/CVE-2026-70767.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-70766](https://cve.now/CVE-2026-70766.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.4, Oracle Hyperion Financial Reporting)
- [CVE-2026-70765](https://cve.now/CVE-2026-70765.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70764](https://cve.now/CVE-2026-70764.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle General Ledger)
- [CVE-2026-70763](https://cve.now/CVE-2026-70763.md): Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: Daily Business Intelligence). (CVSS 7.5, Oracle Operations Intelligence)
- [CVE-2026-70762](https://cve.now/CVE-2026-70762.md): Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Risk Management)
- [CVE-2026-70761](https://cve.now/CVE-2026-70761.md): Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Risk Management)
- [CVE-2026-70760](https://cve.now/CVE-2026-70760.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 7.1, Oracle Order Management)
- [CVE-2026-70759](https://cve.now/CVE-2026-70759.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.4, Oracle Hyperion Financial Reporting)
- [CVE-2026-70758](https://cve.now/CVE-2026-70758.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.3, Oracle Hyperion Financial Reporting)
- [CVE-2026-70754](https://cve.now/CVE-2026-70754.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.3, Oracle Hyperion Financial Reporting)
- [CVE-2026-70753](https://cve.now/CVE-2026-70753.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.3, Oracle Hyperion Financial Reporting)
- [CVE-2026-70752](https://cve.now/CVE-2026-70752.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 7.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-70751](https://cve.now/CVE-2026-70751.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70750](https://cve.now/CVE-2026-70750.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 7.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70749](https://cve.now/CVE-2026-70749.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70747](https://cve.now/CVE-2026-70747.md): Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab). (CVSS 8.8, Oracle Customers Online)
- [CVE-2026-70746](https://cve.now/CVE-2026-70746.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70745](https://cve.now/CVE-2026-70745.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 9.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70744](https://cve.now/CVE-2026-70744.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70743](https://cve.now/CVE-2026-70743.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.2, Oracle Hyperion Financial Reporting)
- [CVE-2026-70742](https://cve.now/CVE-2026-70742.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70741](https://cve.now/CVE-2026-70741.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 9.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70740](https://cve.now/CVE-2026-70740.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 9.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70739](https://cve.now/CVE-2026-70739.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 9.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70738](https://cve.now/CVE-2026-70738.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 8.1, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70737](https://cve.now/CVE-2026-70737.md): Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Storage Server… (CVSS 8.8, Oracle Enterprise Manager for Systems Infrastructure)
- [CVE-2026-70736](https://cve.now/CVE-2026-70736.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 7.1, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70735](https://cve.now/CVE-2026-70735.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 7.2, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70734](https://cve.now/CVE-2026-70734.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 7.4, Oracle Autonomous Health Framework)
- [CVE-2026-70733](https://cve.now/CVE-2026-70733.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 7.1, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70732](https://cve.now/CVE-2026-70732.md): Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). (CVSS 6.5, Oracle Mobile Application Server)
- [CVE-2026-70731](https://cve.now/CVE-2026-70731.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 8.4, Oracle Autonomous Health Framework)
- [CVE-2026-70730](https://cve.now/CVE-2026-70730.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 9.1, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70729](https://cve.now/CVE-2026-70729.md): Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Request Form). (CVSS 8.8, Oracle Teleservice)
- [CVE-2026-70728](https://cve.now/CVE-2026-70728.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 8.5, Oracle Autonomous Health Framework)
- [CVE-2026-70727](https://cve.now/CVE-2026-70727.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-70726](https://cve.now/CVE-2026-70726.md): Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.0, Oracle Cash Management)
- [CVE-2026-70725](https://cve.now/CVE-2026-70725.md): Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Advanced Inbound Telephony)
- [CVE-2026-70724](https://cve.now/CVE-2026-70724.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 7.5, Oracle MySQL Cluster)
- [CVE-2026-70723](https://cve.now/CVE-2026-70723.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 7.7, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70722](https://cve.now/CVE-2026-70722.md): Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.2, Oracle Advanced Inbound Telephony)
- [CVE-2026-70721](https://cve.now/CVE-2026-70721.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 8.6, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70720](https://cve.now/CVE-2026-70720.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Production Scheduling)
- [CVE-2026-70719](https://cve.now/CVE-2026-70719.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 4.0, Oracle Hyperion Calculation Manager)
- [CVE-2026-70718](https://cve.now/CVE-2026-70718.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.5, Oracle Bills of Material)
- [CVE-2026-70717](https://cve.now/CVE-2026-70717.md): Vulnerability in Oracle Autonomous Health Framework (component: Cluster Health Analyzer). (CVSS 7.7, Oracle Autonomous Health Framework)
- [CVE-2026-70716](https://cve.now/CVE-2026-70716.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.9, Oracle Helidon)
- [CVE-2026-70715](https://cve.now/CVE-2026-70715.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 8.8, Oracle Autonomous Health Framework)
- [CVE-2026-70714](https://cve.now/CVE-2026-70714.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 4.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-70713](https://cve.now/CVE-2026-70713.md): Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). (CVSS 7.5, Oracle iSetup)
- [CVE-2026-70712](https://cve.now/CVE-2026-70712.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 6.4, Oracle Agile Engineering Data Management)
- [CVE-2026-70711](https://cve.now/CVE-2026-70711.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.6, Oracle Hyperion Calculation Manager)
- [CVE-2026-70710](https://cve.now/CVE-2026-70710.md): Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). (CVSS 8.8, Oracle Sales Foundation)
- [CVE-2026-70709](https://cve.now/CVE-2026-70709.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication… (CVSS 4.8, Oracle Agile Engineering Data Management)
- [CVE-2026-70708](https://cve.now/CVE-2026-70708.md): Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). (CVSS 8.1, Oracle Sales Foundation)
- [CVE-2026-70707](https://cve.now/CVE-2026-70707.md): Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Sales for Handhelds)
- [CVE-2026-70706](https://cve.now/CVE-2026-70706.md): Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Sales)
- [CVE-2026-70705](https://cve.now/CVE-2026-70705.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-70704](https://cve.now/CVE-2026-70704.md): Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). (CVSS 8.1, Oracle Trading Community)
- [CVE-2026-70703](https://cve.now/CVE-2026-70703.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication… (CVSS 8.2, Oracle Agile Engineering Data Management)
- [CVE-2026-70702](https://cve.now/CVE-2026-70702.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 8.2, Oracle Payments)
- [CVE-2026-70701](https://cve.now/CVE-2026-70701.md): Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Payables)
- [CVE-2026-70700](https://cve.now/CVE-2026-70700.md): Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Payables)
- [CVE-2026-70699](https://cve.now/CVE-2026-70699.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.4, Oracle Payments)
- [CVE-2026-70698](https://cve.now/CVE-2026-70698.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 6.7, Oracle Agile Engineering Data Management)
- [CVE-2026-70697](https://cve.now/CVE-2026-70697.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication… (CVSS 7.0, Oracle Agile Engineering Data Management)
- [CVE-2026-70696](https://cve.now/CVE-2026-70696.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.5, Oracle Payments)
- [CVE-2026-70695](https://cve.now/CVE-2026-70695.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.7, Oracle Payments)
- [CVE-2026-70694](https://cve.now/CVE-2026-70694.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.7, Oracle Payments)
- [CVE-2026-70693](https://cve.now/CVE-2026-70693.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication… (CVSS 6.3, Oracle Agile Engineering Data Management)
- [CVE-2026-70692](https://cve.now/CVE-2026-70692.md): Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Marketing Encyclopedia System)
- [CVE-2026-70691](https://cve.now/CVE-2026-70691.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication… (CVSS 7.5, Oracle Agile Engineering Data Management)
- [CVE-2026-70690](https://cve.now/CVE-2026-70690.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). (CVSS 8.0, Oracle HRMS)
- [CVE-2026-70689](https://cve.now/CVE-2026-70689.md): Vulnerability in Oracle Essbase (component: Infrastructure). (CVSS 9.8, Oracle Essbase)
- [CVE-2026-70688](https://cve.now/CVE-2026-70688.md): Vulnerability in Oracle Essbase (component: Calculator). (CVSS 8.8, Oracle Essbase)
- [CVE-2026-70687](https://cve.now/CVE-2026-70687.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). (CVSS 7.7, Oracle Marketing)
- [CVE-2026-70686](https://cve.now/CVE-2026-70686.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle General Ledger)
- [CVE-2026-70685](https://cve.now/CVE-2026-70685.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.9, Oracle Hyperion Calculation Manager)
- [CVE-2026-70684](https://cve.now/CVE-2026-70684.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 8.1, Oracle Enterprise Manager Base Platform)
- [CVE-2026-70683](https://cve.now/CVE-2026-70683.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 4.3, Oracle Hyperion Calculation Manager)
- [CVE-2026-70682](https://cve.now/CVE-2026-70682.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.7, Oracle Hyperion Calculation Manager)
- [CVE-2026-70681](https://cve.now/CVE-2026-70681.md): Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: JRI and other Java utils). (CVSS 7.5, Oracle Applications DBA)
- [CVE-2026-70680](https://cve.now/CVE-2026-70680.md): Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Applications DBA)
- [CVE-2026-70679](https://cve.now/CVE-2026-70679.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Calculation Manager)
- [CVE-2026-70678](https://cve.now/CVE-2026-70678.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.6, Oracle Hyperion Calculation Manager)
- [CVE-2026-70677](https://cve.now/CVE-2026-70677.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.9, Oracle Hyperion Calculation Manager)
- [CVE-2026-70676](https://cve.now/CVE-2026-70676.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.0, Oracle Hyperion Calculation Manager)
- [CVE-2026-70675](https://cve.now/CVE-2026-70675.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.1, Oracle Reports Developer)
- [CVE-2026-70674](https://cve.now/CVE-2026-70674.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-70673](https://cve.now/CVE-2026-70673.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.3, Oracle Reports Developer)
- [CVE-2026-70672](https://cve.now/CVE-2026-70672.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 7.4, Oracle Reports Developer)
- [CVE-2026-70671](https://cve.now/CVE-2026-70671.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.1, Oracle Reports Developer)
- [CVE-2026-70670](https://cve.now/CVE-2026-70670.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.6, Oracle Reports Developer)
- [CVE-2026-70669](https://cve.now/CVE-2026-70669.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-70668](https://cve.now/CVE-2026-70668.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.1, Oracle Reports Developer)
- [CVE-2026-62640](https://cve.now/CVE-2026-62640.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62639](https://cve.now/CVE-2026-62639.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62638](https://cve.now/CVE-2026-62638.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.1, Oracle Reports Developer)
- [CVE-2026-62637](https://cve.now/CVE-2026-62637.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.3, Oracle Reports Developer)
- [CVE-2026-62636](https://cve.now/CVE-2026-62636.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.6, Oracle Reports Developer)
- [CVE-2026-62635](https://cve.now/CVE-2026-62635.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62634](https://cve.now/CVE-2026-62634.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62633](https://cve.now/CVE-2026-62633.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62632](https://cve.now/CVE-2026-62632.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62631](https://cve.now/CVE-2026-62631.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-62630](https://cve.now/CVE-2026-62630.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62629](https://cve.now/CVE-2026-62629.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.4, Oracle Reports Developer)
- [CVE-2026-62628](https://cve.now/CVE-2026-62628.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.6, Oracle Reports Developer)
- [CVE-2026-62627](https://cve.now/CVE-2026-62627.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 7.1, Oracle Reports Developer)
- [CVE-2026-62626](https://cve.now/CVE-2026-62626.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62625](https://cve.now/CVE-2026-62625.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.6, Oracle Reports Developer)
- [CVE-2026-62624](https://cve.now/CVE-2026-62624.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62623](https://cve.now/CVE-2026-62623.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-62622](https://cve.now/CVE-2026-62622.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62621](https://cve.now/CVE-2026-62621.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62620](https://cve.now/CVE-2026-62620.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.6, Oracle Reports Developer)
- [CVE-2026-62619](https://cve.now/CVE-2026-62619.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-62618](https://cve.now/CVE-2026-62618.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.3, Oracle Reports Developer)
- [CVE-2026-62617](https://cve.now/CVE-2026-62617.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62616](https://cve.now/CVE-2026-62616.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 7.2, Oracle Reports Developer)
- [CVE-2026-62615](https://cve.now/CVE-2026-62615.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.5, Oracle Reports Developer)
- [CVE-2026-62614](https://cve.now/CVE-2026-62614.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62613](https://cve.now/CVE-2026-62613.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.3, Oracle Reports Developer)
- [CVE-2026-62612](https://cve.now/CVE-2026-62612.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-62611](https://cve.now/CVE-2026-62611.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62610](https://cve.now/CVE-2026-62610.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.1, Oracle Reports Developer)
- [CVE-2026-62609](https://cve.now/CVE-2026-62609.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62608](https://cve.now/CVE-2026-62608.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.9, Oracle Reports Developer)
- [CVE-2026-62607](https://cve.now/CVE-2026-62607.md): Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.7, Oracle Customer Care)
- [CVE-2026-62606](https://cve.now/CVE-2026-62606.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-62605](https://cve.now/CVE-2026-62605.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.2, Oracle Partner Management)
- [CVE-2026-62604](https://cve.now/CVE-2026-62604.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-62603](https://cve.now/CVE-2026-62603.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.4, Oracle Hyperion Calculation Manager)
- [CVE-2026-62602](https://cve.now/CVE-2026-62602.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.0, Oracle Hyperion Calculation Manager)
- [CVE-2026-62601](https://cve.now/CVE-2026-62601.md): Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Sales)
- [CVE-2026-62600](https://cve.now/CVE-2026-62600.md): Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Sales)
- [CVE-2026-62599](https://cve.now/CVE-2026-62599.md): Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Third Party Data Integration). (CVSS 8.6, Oracle Trading Community)
- [CVE-2026-62598](https://cve.now/CVE-2026-62598.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.2, Oracle Hyperion Calculation Manager)
- [CVE-2026-62596](https://cve.now/CVE-2026-62596.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.5, Oracle Siebel CRM Integration)
- [CVE-2026-62595](https://cve.now/CVE-2026-62595.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.1, Oracle Siebel CRM Integration)
- [CVE-2026-62594](https://cve.now/CVE-2026-62594.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 7.7, Oracle Siebel CRM Integration)
- [CVE-2026-62593](https://cve.now/CVE-2026-62593.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 7.7, Oracle Siebel CRM Integration)
- [CVE-2026-62592](https://cve.now/CVE-2026-62592.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 9.8, Oracle Siebel CRM Integration)
- [CVE-2026-62591](https://cve.now/CVE-2026-62591.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.1, Oracle Siebel CRM Integration)
- [CVE-2026-62590](https://cve.now/CVE-2026-62590.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.5, Oracle Siebel CRM Integration)
- [CVE-2026-62589](https://cve.now/CVE-2026-62589.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.7, Oracle Siebel CRM Integration)
- [CVE-2026-62588](https://cve.now/CVE-2026-62588.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 9.9, Oracle Siebel CRM Integration)
- [CVE-2026-62587](https://cve.now/CVE-2026-62587.md): Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). (CVSS 7.1, Oracle Siebel CRM Administration)
- [CVE-2026-62586](https://cve.now/CVE-2026-62586.md): Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). (CVSS 8.6, Oracle Siebel CRM Administration)
- [CVE-2026-62585](https://cve.now/CVE-2026-62585.md): Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). (CVSS 9.8, Oracle Siebel CRM Administration)
- [CVE-2026-62584](https://cve.now/CVE-2026-62584.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 4.0, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62583](https://cve.now/CVE-2026-62583.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.0, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62582](https://cve.now/CVE-2026-62582.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 9.6, Oracle Hyperion Calculation Manager)
- [CVE-2026-62581](https://cve.now/CVE-2026-62581.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62580](https://cve.now/CVE-2026-62580.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 2.6, Oracle Hyperion Calculation Manager)
- [CVE-2026-62579](https://cve.now/CVE-2026-62579.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62578](https://cve.now/CVE-2026-62578.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Calculation Manager)
- [CVE-2026-62577](https://cve.now/CVE-2026-62577.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62576](https://cve.now/CVE-2026-62576.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62575](https://cve.now/CVE-2026-62575.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 4.7, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62573](https://cve.now/CVE-2026-62573.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62572](https://cve.now/CVE-2026-62572.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62571](https://cve.now/CVE-2026-62571.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.7, Oracle Hyperion Calculation Manager)
- [CVE-2026-62570](https://cve.now/CVE-2026-62570.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.0, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62569](https://cve.now/CVE-2026-62569.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.4, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62568](https://cve.now/CVE-2026-62568.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62566](https://cve.now/CVE-2026-62566.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62564](https://cve.now/CVE-2026-62564.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62558](https://cve.now/CVE-2026-62558.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62555](https://cve.now/CVE-2026-62555.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62554](https://cve.now/CVE-2026-62554.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62553](https://cve.now/CVE-2026-62553.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62552](https://cve.now/CVE-2026-62552.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62551](https://cve.now/CVE-2026-62551.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62550](https://cve.now/CVE-2026-62550.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62545](https://cve.now/CVE-2026-62545.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62544](https://cve.now/CVE-2026-62544.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62543](https://cve.now/CVE-2026-62543.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62541](https://cve.now/CVE-2026-62541.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62540](https://cve.now/CVE-2026-62540.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). (CVSS 7.2, Oracle Cost Management)
- [CVE-2026-62539](https://cve.now/CVE-2026-62539.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62538](https://cve.now/CVE-2026-62538.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.4, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62537](https://cve.now/CVE-2026-62537.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62536](https://cve.now/CVE-2026-62536.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62535](https://cve.now/CVE-2026-62535.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.6, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62533](https://cve.now/CVE-2026-62533.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.7, Oracle Hyperion Calculation Manager)
- [CVE-2026-62532](https://cve.now/CVE-2026-62532.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.8, Oracle Hyperion Calculation Manager)
- [CVE-2026-62531](https://cve.now/CVE-2026-62531.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62529](https://cve.now/CVE-2026-62529.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.5, Oracle Hyperion Calculation Manager)
- [CVE-2026-62526](https://cve.now/CVE-2026-62526.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 3.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62523](https://cve.now/CVE-2026-62523.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62522](https://cve.now/CVE-2026-62522.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62520](https://cve.now/CVE-2026-62520.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 4.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62512](https://cve.now/CVE-2026-62512.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.9, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62511](https://cve.now/CVE-2026-62511.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.0, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62510](https://cve.now/CVE-2026-62510.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62509](https://cve.now/CVE-2026-62509.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 5.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62506](https://cve.now/CVE-2026-62506.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62502](https://cve.now/CVE-2026-62502.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62501](https://cve.now/CVE-2026-62501.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62500](https://cve.now/CVE-2026-62500.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62499](https://cve.now/CVE-2026-62499.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 6.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62492](https://cve.now/CVE-2026-62492.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 7.4, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62491](https://cve.now/CVE-2026-62491.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Purchasing)
- [CVE-2026-62485](https://cve.now/CVE-2026-62485.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.2, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62481](https://cve.now/CVE-2026-62481.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62477](https://cve.now/CVE-2026-62477.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62475](https://cve.now/CVE-2026-62475.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.6, Oracle Shipping Execution)
- [CVE-2026-62471](https://cve.now/CVE-2026-62471.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62467](https://cve.now/CVE-2026-62467.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 7.7, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62463](https://cve.now/CVE-2026-62463.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). (CVSS 9.6, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62462](https://cve.now/CVE-2026-62462.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Work in Process)
- [CVE-2026-62461](https://cve.now/CVE-2026-62461.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-62460](https://cve.now/CVE-2026-62460.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.0, Oracle Hyperion Calculation Manager)
- [CVE-2026-62459](https://cve.now/CVE-2026-62459.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.2, Oracle Hyperion Calculation Manager)
- [CVE-2026-62458](https://cve.now/CVE-2026-62458.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Work in Process)
- [CVE-2026-62457](https://cve.now/CVE-2026-62457.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62455](https://cve.now/CVE-2026-62455.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.3, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62454](https://cve.now/CVE-2026-62454.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 7.8, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62452](https://cve.now/CVE-2026-62452.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.9, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62450](https://cve.now/CVE-2026-62450.md): Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Flow Manufacturing)
- [CVE-2026-62449](https://cve.now/CVE-2026-62449.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.0, Oracle Work in Process)
- [CVE-2026-62448](https://cve.now/CVE-2026-62448.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). (CVSS 8.2, Oracle Email Center)
- [CVE-2026-62446](https://cve.now/CVE-2026-62446.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Calculation Manager)
- [CVE-2026-62442](https://cve.now/CVE-2026-62442.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.1, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62441](https://cve.now/CVE-2026-62441.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.4, Oracle Hyperion Calculation Manager)
- [CVE-2026-61342](https://cve.now/CVE-2026-61342.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Calculation Manager)
- [CVE-2026-61341](https://cve.now/CVE-2026-61341.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.8, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61340](https://cve.now/CVE-2026-61340.md): Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.2, Oracle MES for Process Manufacturing)
- [CVE-2026-61339](https://cve.now/CVE-2026-61339.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 7.3, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61332](https://cve.now/CVE-2026-61332.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.7, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61331](https://cve.now/CVE-2026-61331.md): Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). (CVSS 7.7, Oracle Financials Common Modules)
- [CVE-2026-61330](https://cve.now/CVE-2026-61330.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.8, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61326](https://cve.now/CVE-2026-61326.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.5, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61321](https://cve.now/CVE-2026-61321.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.1, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61319](https://cve.now/CVE-2026-61319.md): Vulnerability in the Oracle U.S. (CVSS 8.8, Oracle U.S. Federal Financials)
- [CVE-2026-61318](https://cve.now/CVE-2026-61318.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.8, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61317](https://cve.now/CVE-2026-61317.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.9, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61313](https://cve.now/CVE-2026-61313.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 6.7, Oracle Hyperion Calculation Manager)
- [CVE-2026-61308](https://cve.now/CVE-2026-61308.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component… (CVSS 6.8, Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente…)
- [CVE-2026-61307](https://cve.now/CVE-2026-61307.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application… (CVSS 8.1, Oracle PeopleSoft Enterprise CC Common Application Objects)
- [CVE-2026-61306](https://cve.now/CVE-2026-61306.md): Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Production). (CVSS 7.1, Oracle Complex Maintenance, Repair and Overhaul)
- [CVE-2026-61305](https://cve.now/CVE-2026-61305.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). (CVSS 8.3, Oracle BI Publisher)
- [CVE-2026-61302](https://cve.now/CVE-2026-61302.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin). (CVSS 8.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-61300](https://cve.now/CVE-2026-61300.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 7.8, Oracle Enterprise Manager Base Platform)
- [CVE-2026-61298](https://cve.now/CVE-2026-61298.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). (CVSS 5.6, Oracle Enterprise Manager Base Platform)
- [CVE-2026-61296](https://cve.now/CVE-2026-61296.md): Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Linear Asset Management). (CVSS 7.6, Oracle Enterprise Asset Management)
- [CVE-2026-61295](https://cve.now/CVE-2026-61295.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-61293](https://cve.now/CVE-2026-61293.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-61291](https://cve.now/CVE-2026-61291.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.8, Oracle WebCenter Content)
- [CVE-2026-61290](https://cve.now/CVE-2026-61290.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-61288](https://cve.now/CVE-2026-61288.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-61286](https://cve.now/CVE-2026-61286.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). (CVSS 8.6, Oracle Enterprise Manager Base Platform)
- [CVE-2026-61284](https://cve.now/CVE-2026-61284.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console). (CVSS 8.8, Oracle Enterprise Manager Base Platform)
- [CVE-2026-61281](https://cve.now/CVE-2026-61281.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-61276](https://cve.now/CVE-2026-61276.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Calculation Manager)
- [CVE-2026-61273](https://cve.now/CVE-2026-61273.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-61272](https://cve.now/CVE-2026-61272.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 9.8, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-61270](https://cve.now/CVE-2026-61270.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Orchestrator)
- [CVE-2026-61268](https://cve.now/CVE-2026-61268.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-61265](https://cve.now/CVE-2026-61265.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Orchestrator)
- [CVE-2026-61259](https://cve.now/CVE-2026-61259.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-61258](https://cve.now/CVE-2026-61258.md): Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). (CVSS 9.8, Oracle Internet Directory)
- [CVE-2026-61248](https://cve.now/CVE-2026-61248.md): Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). (CVSS 9.9, Oracle Internet Directory)
- [CVE-2026-61241](https://cve.now/CVE-2026-61241.md): Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). (CVSS 10.0, Oracle Internet Directory)
- [CVE-2026-61231](https://cve.now/CVE-2026-61231.md): Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Directory Server). (CVSS 8.8, Oracle Virtual Directory)
- [CVE-2026-61230](https://cve.now/CVE-2026-61230.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.6, Oracle WebCenter Portal)
- [CVE-2026-61229](https://cve.now/CVE-2026-61229.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.1, Oracle WebCenter Portal)
- [CVE-2026-61228](https://cve.now/CVE-2026-61228.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.6, Oracle WebCenter Portal)
- [CVE-2026-61227](https://cve.now/CVE-2026-61227.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 7.6, Oracle WebCenter Portal)
- [CVE-2026-61222](https://cve.now/CVE-2026-61222.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.2, Oracle WebCenter Portal)
- [CVE-2026-61219](https://cve.now/CVE-2026-61219.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.7, Oracle WebCenter Portal)
- [CVE-2026-61215](https://cve.now/CVE-2026-61215.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.7, Oracle WebCenter Portal)
- [CVE-2026-61213](https://cve.now/CVE-2026-61213.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.8, Oracle WebCenter Portal)
- [CVE-2026-61212](https://cve.now/CVE-2026-61212.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.5, Oracle WebCenter Portal)
- [CVE-2026-61208](https://cve.now/CVE-2026-61208.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 7.6, Oracle WebCenter Portal)
- [CVE-2026-61206](https://cve.now/CVE-2026-61206.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 9.9, Oracle Hyperion Calculation Manager)
- [CVE-2026-61199](https://cve.now/CVE-2026-61199.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 7.7, Oracle WebCenter Portal)
- [CVE-2026-61198](https://cve.now/CVE-2026-61198.md): Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Learning Management)
- [CVE-2026-61193](https://cve.now/CVE-2026-61193.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.7, Oracle WebCenter Portal)
- [CVE-2026-61177](https://cve.now/CVE-2026-61177.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.1, Oracle WebCenter Portal)
- [CVE-2026-61139](https://cve.now/CVE-2026-61139.md): Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). (CVSS 6.3, Oracle Public Sector Financials)
- [CVE-2026-61124](https://cve.now/CVE-2026-61124.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 7.1, Oracle WebCenter Portal)
- [CVE-2026-61118](https://cve.now/CVE-2026-61118.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager)
- [CVE-2026-61066](https://cve.now/CVE-2026-61066.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.9, Oracle Identity Manager)
- [CVE-2026-61058](https://cve.now/CVE-2026-61058.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61054](https://cve.now/CVE-2026-61054.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.2, Oracle WebCenter Sites)
- [CVE-2026-61045](https://cve.now/CVE-2026-61045.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.6, Oracle WebCenter Sites)
- [CVE-2026-61042](https://cve.now/CVE-2026-61042.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61040](https://cve.now/CVE-2026-61040.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61038](https://cve.now/CVE-2026-61038.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.2, Oracle WebCenter Sites)
- [CVE-2026-61034](https://cve.now/CVE-2026-61034.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.1, Oracle WebCenter Sites)
- [CVE-2026-61033](https://cve.now/CVE-2026-61033.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.6, Oracle WebCenter Sites)
- [CVE-2026-61032](https://cve.now/CVE-2026-61032.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61029](https://cve.now/CVE-2026-61029.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.0, Oracle WebCenter Sites)
- [CVE-2026-61022](https://cve.now/CVE-2026-61022.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61021](https://cve.now/CVE-2026-61021.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.9, Oracle WebCenter Sites)
- [CVE-2026-61018](https://cve.now/CVE-2026-61018.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.8, Oracle WebCenter Sites)
- [CVE-2026-61017](https://cve.now/CVE-2026-61017.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61016](https://cve.now/CVE-2026-61016.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.2, Oracle WebCenter Sites)
- [CVE-2026-61011](https://cve.now/CVE-2026-61011.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.2, Oracle WebCenter Sites)
- [CVE-2026-61008](https://cve.now/CVE-2026-61008.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.1, Oracle WebCenter Sites)
- [CVE-2026-61007](https://cve.now/CVE-2026-61007.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 7.5, Oracle WebCenter Sites)
- [CVE-2026-61003](https://cve.now/CVE-2026-61003.md): Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). (CVSS 9.9, Oracle Managed File Transfer)
- [CVE-2026-61002](https://cve.now/CVE-2026-61002.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). (CVSS 8.8, Oracle SOA Suite)
- [CVE-2026-61001](https://cve.now/CVE-2026-61001.md): Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). (CVSS 9.6, Oracle Web Services Manager)
- [CVE-2026-60998](https://cve.now/CVE-2026-60998.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory). (CVSS 8.0, Oracle Identity Manager Connector)
- [CVE-2026-60996](https://cve.now/CVE-2026-60996.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). (CVSS 8.7, Oracle Identity Manager Connector)
- [CVE-2026-60995](https://cve.now/CVE-2026-60995.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 9.9, Oracle Identity Manager Connector)
- [CVE-2026-60994](https://cve.now/CVE-2026-60994.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 7.2, Oracle Identity Manager Connector)
- [CVE-2026-60993](https://cve.now/CVE-2026-60993.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Identity Manager Connector)
- [CVE-2026-60992](https://cve.now/CVE-2026-60992.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle Identity Manager Connector)
- [CVE-2026-60991](https://cve.now/CVE-2026-60991.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 7.8, Oracle Identity Manager Connector)
- [CVE-2026-60990](https://cve.now/CVE-2026-60990.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 9.9, Oracle Identity Manager Connector)
- [CVE-2026-60983](https://cve.now/CVE-2026-60983.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.7, Oracle WebCenter Content)
- [CVE-2026-60981](https://cve.now/CVE-2026-60981.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60980](https://cve.now/CVE-2026-60980.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60977](https://cve.now/CVE-2026-60977.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60976](https://cve.now/CVE-2026-60976.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Scripting)
- [CVE-2026-60975](https://cve.now/CVE-2026-60975.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 7.5, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60971](https://cve.now/CVE-2026-60971.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60970](https://cve.now/CVE-2026-60970.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60969](https://cve.now/CVE-2026-60969.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.7, Oracle Unified Directory)
- [CVE-2026-60967](https://cve.now/CVE-2026-60967.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). (CVSS 8.8, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60961](https://cve.now/CVE-2026-60961.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.0, Oracle WebCenter Content)
- [CVE-2026-60958](https://cve.now/CVE-2026-60958.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60956](https://cve.now/CVE-2026-60956.md): Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Edwards (component: Payroll). (CVSS 7.5, Oracle JD Edwards EnterpriseOne US Payroll)
- [CVE-2026-60955](https://cve.now/CVE-2026-60955.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.2, Oracle WebCenter Content)
- [CVE-2026-60954](https://cve.now/CVE-2026-60954.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60949](https://cve.now/CVE-2026-60949.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-60947](https://cve.now/CVE-2026-60947.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60946](https://cve.now/CVE-2026-60946.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60944](https://cve.now/CVE-2026-60944.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.2, Oracle WebCenter Content)
- [CVE-2026-60935](https://cve.now/CVE-2026-60935.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60934](https://cve.now/CVE-2026-60934.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60933](https://cve.now/CVE-2026-60933.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.4, Oracle WebCenter Content)
- [CVE-2026-60928](https://cve.now/CVE-2026-60928.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.4, Oracle WebCenter Content)
- [CVE-2026-60921](https://cve.now/CVE-2026-60921.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60916](https://cve.now/CVE-2026-60916.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60915](https://cve.now/CVE-2026-60915.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.4, Oracle Helidon)
- [CVE-2026-60914](https://cve.now/CVE-2026-60914.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.5, Oracle Unified Directory)
- [CVE-2026-60909](https://cve.now/CVE-2026-60909.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.6, Oracle WebCenter Content)
- [CVE-2026-60906](https://cve.now/CVE-2026-60906.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.5, Oracle WebCenter Content)
- [CVE-2026-60905](https://cve.now/CVE-2026-60905.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 9.6, Oracle WebCenter Content)
- [CVE-2026-60903](https://cve.now/CVE-2026-60903.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60902](https://cve.now/CVE-2026-60902.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo). (CVSS 7.0, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60895](https://cve.now/CVE-2026-60895.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 6.8, Oracle Unified Directory)
- [CVE-2026-60889](https://cve.now/CVE-2026-60889.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.5, Oracle Unified Directory)
- [CVE-2026-60884](https://cve.now/CVE-2026-60884.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). (CVSS 4.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60883](https://cve.now/CVE-2026-60883.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PeopleCode). (CVSS 7.2, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60879](https://cve.now/CVE-2026-60879.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration Manager). (CVSS 8.8, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60873](https://cve.now/CVE-2026-60873.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). (CVSS 7.2, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60866](https://cve.now/CVE-2026-60866.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 6.5, Oracle Service Delivery Platform)
- [CVE-2026-60865](https://cve.now/CVE-2026-60865.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 6.8, Oracle Service Delivery Platform)
- [CVE-2026-60861](https://cve.now/CVE-2026-60861.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.6, Oracle Service Delivery Platform)
- [CVE-2026-60860](https://cve.now/CVE-2026-60860.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 8.7, Oracle Service Delivery Platform)
- [CVE-2026-60858](https://cve.now/CVE-2026-60858.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 9.8, Oracle Hyperion Calculation Manager)
- [CVE-2026-60856](https://cve.now/CVE-2026-60856.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Install and Packaging). (CVSS 7.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60853](https://cve.now/CVE-2026-60853.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 3.7, Oracle Helidon)
- [CVE-2026-60850](https://cve.now/CVE-2026-60850.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.5, Oracle Unified Directory)
- [CVE-2026-60849](https://cve.now/CVE-2026-60849.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.5, Oracle Unified Directory)
- [CVE-2026-60841](https://cve.now/CVE-2026-60841.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.5, Oracle Unified Directory)
- [CVE-2026-60831](https://cve.now/CVE-2026-60831.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). (CVSS 8.1, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60830](https://cve.now/CVE-2026-60830.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). (CVSS 6.5, Oracle Workflow)
- [CVE-2026-60822](https://cve.now/CVE-2026-60822.md): Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Agent). (CVSS 7.8, Oracle Enterprise Manager for Systems Infrastructure)
- [CVE-2026-60821](https://cve.now/CVE-2026-60821.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 9.8, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60820](https://cve.now/CVE-2026-60820.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 7.4, Oracle Siebel CRM Integration)
- [CVE-2026-60808](https://cve.now/CVE-2026-60808.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). (CVSS 7.5, Oracle Siebel Apps - Marketing)
- [CVE-2026-60803](https://cve.now/CVE-2026-60803.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 7.4, Oracle Siebel Apps - Marketing)
- [CVE-2026-60798](https://cve.now/CVE-2026-60798.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). (CVSS 8.5, Oracle Siebel CRM Deployment)
- [CVE-2026-60797](https://cve.now/CVE-2026-60797.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 7.4, Oracle Siebel CRM Integration)
- [CVE-2026-60796](https://cve.now/CVE-2026-60796.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 8.2, Oracle Siebel CRM Integration)
- [CVE-2026-60792](https://cve.now/CVE-2026-60792.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.4, Oracle Siebel CRM Deployment)
- [CVE-2026-60791](https://cve.now/CVE-2026-60791.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). (CVSS 8.1, Oracle Siebel CRM Deployment)
- [CVE-2026-60782](https://cve.now/CVE-2026-60782.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 9.8, Oracle Payments)
- [CVE-2026-60781](https://cve.now/CVE-2026-60781.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.1, Oracle Payments)
- [CVE-2026-60779](https://cve.now/CVE-2026-60779.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 8.1, Oracle Siebel Apps - Marketing)
- [CVE-2026-60769](https://cve.now/CVE-2026-60769.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle General Ledger)
- [CVE-2026-60767](https://cve.now/CVE-2026-60767.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 8.8, Oracle Siebel Apps - Marketing)
- [CVE-2026-60766](https://cve.now/CVE-2026-60766.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 7.4, Oracle Siebel CRM Integration)
- [CVE-2026-60765](https://cve.now/CVE-2026-60765.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 7.5, Oracle Siebel Apps - Marketing)
- [CVE-2026-60759](https://cve.now/CVE-2026-60759.md): Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle Internet Procurement Connector)
- [CVE-2026-60758](https://cve.now/CVE-2026-60758.md): Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI). (CVSS 8.5, Oracle Siebel Artificial Intelligence)
- [CVE-2026-60757](https://cve.now/CVE-2026-60757.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Search). (CVSS 8.1, Oracle Siebel CRM End User)
- [CVE-2026-60754](https://cve.now/CVE-2026-60754.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 9.1, Oracle Siebel Apps - Marketing)
- [CVE-2026-60753](https://cve.now/CVE-2026-60753.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). (CVSS 7.8, Oracle Siebel CRM Deployment)
- [CVE-2026-60752](https://cve.now/CVE-2026-60752.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 7.1, Oracle Siebel Apps - Marketing)
- [CVE-2026-60751](https://cve.now/CVE-2026-60751.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 8.8, Oracle Siebel Apps - Marketing)
- [CVE-2026-60748](https://cve.now/CVE-2026-60748.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle General Ledger)
- [CVE-2026-60742](https://cve.now/CVE-2026-60742.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 8.1, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60737](https://cve.now/CVE-2026-60737.md): Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). (CVSS 9.1, Oracle Web Services Manager)
- [CVE-2026-60733](https://cve.now/CVE-2026-60733.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). (CVSS 7.7, Oracle WebCenter Portal)
- [CVE-2026-60731](https://cve.now/CVE-2026-60731.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). (CVSS 8.8, Oracle WebCenter Portal)
- [CVE-2026-60730](https://cve.now/CVE-2026-60730.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). (CVSS 9.9, Oracle WebCenter Portal)
- [CVE-2026-60729](https://cve.now/CVE-2026-60729.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). (CVSS 8.8, Oracle WebCenter Portal)
- [CVE-2026-60728](https://cve.now/CVE-2026-60728.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). (CVSS 9.1, Oracle WebCenter Portal)
- [CVE-2026-60727](https://cve.now/CVE-2026-60727.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.8, Oracle Identity Manager)
- [CVE-2026-60726](https://cve.now/CVE-2026-60726.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.8, Oracle Access Manager)
- [CVE-2026-60722](https://cve.now/CVE-2026-60722.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager)
- [CVE-2026-60721](https://cve.now/CVE-2026-60721.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.8, Oracle Identity Manager)
- [CVE-2026-60720](https://cve.now/CVE-2026-60720.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.9, Oracle Identity Manager)
- [CVE-2026-60716](https://cve.now/CVE-2026-60716.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager)
- [CVE-2026-60715](https://cve.now/CVE-2026-60715.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager)
- [CVE-2026-60707](https://cve.now/CVE-2026-60707.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security). (CVSS 8.7, Oracle Identity Manager)
- [CVE-2026-60702](https://cve.now/CVE-2026-60702.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.9, Oracle WebLogic Server)
- [CVE-2026-60699](https://cve.now/CVE-2026-60699.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.6, Oracle WebLogic Server)
- [CVE-2026-60698](https://cve.now/CVE-2026-60698.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60696](https://cve.now/CVE-2026-60696.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60693](https://cve.now/CVE-2026-60693.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle General Ledger)
- [CVE-2026-60682](https://cve.now/CVE-2026-60682.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). (CVSS 6.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-60680](https://cve.now/CVE-2026-60680.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle WebLogic Server)
- [CVE-2026-60679](https://cve.now/CVE-2026-60679.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2026-60672](https://cve.now/CVE-2026-60672.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60592](https://cve.now/CVE-2026-60592.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). (CVSS 8.2, Oracle MySQL Cluster)
- [CVE-2026-60591](https://cve.now/CVE-2026-60591.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). (CVSS 9.1, Oracle Hospitality Simphony)
- [CVE-2026-60590](https://cve.now/CVE-2026-60590.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). (CVSS 7.5, Oracle Hospitality Simphony)
- [CVE-2026-60589](https://cve.now/CVE-2026-60589.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component… (CVSS 3.7, Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente…)
- [CVE-2026-60415](https://cve.now/CVE-2026-60415.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle WebLogic Server)
- [CVE-2026-60414](https://cve.now/CVE-2026-60414.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.8, Oracle Outside In Technology)
- [CVE-2026-60413](https://cve.now/CVE-2026-60413.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.8, Oracle Outside In Technology)
- [CVE-2026-60412](https://cve.now/CVE-2026-60412.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.8, Oracle Outside In Technology)
- [CVE-2026-60393](https://cve.now/CVE-2026-60393.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-60392](https://cve.now/CVE-2026-60392.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). (CVSS 7.8, Oracle Outside In Technology)
- [CVE-2026-60391](https://cve.now/CVE-2026-60391.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 7.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-55426](https://cve.now/CVE-2026-55426.md): linuxfabrik-lib: Local privilege escalation using embedded command (CVSS 7.8, Linuxfabrik monitoring-plugins · Linuxfabrik lib +1)
- [CVE-2026-12632](https://cve.now/CVE-2026-12632.md): Out-of-bounds read in Zephyr PTP message parsing from unvalidated message type (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-12631](https://cve.now/CVE-2026-12631.md): Broken access-control denial in k\_thread\_join/k\_thread\_abort syscall validation in Zephyr kernel (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-53759](https://cve.now/CVE-2026-53759.md): linuxfabrik-lib: Insecure creation of SQLite databases (CVSS 2.0, Linuxfabrik monitoring-plugins · linuxfabrik-lib)
- [CVE-2026-52817](https://cve.now/CVE-2026-52817.md): Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation (CVSS 7.0, Linuxfabrik monitoring-plugins · linuxfabrik-lib)
- [CVE-2026-53457](https://cve.now/CVE-2026-53457.md): Blueprint Studio terminal command working directory not bounded to config directory (CVSS 5.1, ha-china blueprint-studio)
- [CVE-2026-53456](https://cve.now/CVE-2026-53456.md): Blueprint Studio terminal SSH private key written to disk (CVSS 5.6, ha-china blueprint-studio)
- [CVE-2026-53455](https://cve.now/CVE-2026-53455.md): Blueprint Studio Git credential helper command injection (CVSS 8.6, ha-china blueprint-studio)
- [CVE-2026-53454](https://cve.now/CVE-2026-53454.md): Blueprint Studio stored Git credentials in plaintext Git credential store (CVSS 6.9, ha-china blueprint-studio)
- [CVE-2026-53453](https://cve.now/CVE-2026-53453.md): Blueprint Studio API authorization bypass for non-admin Home Assistant users (CVSS 8.7, ha-china blueprint-studio)
- [CVE-2026-53458](https://cve.now/CVE-2026-53458.md): Blueprint Studio API exposed internal exception details (CVSS 5.3, ha-china blueprint-studio)
- [CVE-2026-15571](https://cve.now/CVE-2026-15571.md): Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client (CVSS 7.3, Red Hat build of Keycloak · Red Hat Data Grid +2)
- [CVE-2026-76045](https://cve.now/CVE-2026-76045.md): Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-76038](https://cve.now/CVE-2026-76038.md): Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-76047](https://cve.now/CVE-2026-76047.md): Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (CVSS 8.8, Google Chrome)
- [CVE-2026-76041](https://cve.now/CVE-2026-76041.md): Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a… (CVSS 4.3, Google Chrome)
- [CVE-2026-76043](https://cve.now/CVE-2026-76043.md): Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the… (CVSS 8.8, Google Chrome)
- [CVE-2026-76046](https://cve.now/CVE-2026-76046.md): Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer… (CVSS 8.3, Google Chrome)
- [CVE-2026-76042](https://cve.now/CVE-2026-76042.md): Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer… (CVSS 3.1, Google Chrome)
- [CVE-2026-76035](https://cve.now/CVE-2026-76035.md): Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary… (CVSS 9.6, Google Chrome)
- [CVE-2026-76040](https://cve.now/CVE-2026-76040.md): Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to… (CVSS 8.8, Google Chrome)
- [CVE-2026-76039](https://cve.now/CVE-2026-76039.md): Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social… (CVSS 6.5, Google Chrome)
- [CVE-2026-76044](https://cve.now/CVE-2026-76044.md): Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to… (CVSS 8.3, Google Chrome)
- [CVE-2026-76037](https://cve.now/CVE-2026-76037.md): Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially… (CVSS 8.4, Google Chrome)
- [CVE-2026-76033](https://cve.now/CVE-2026-76033.md): Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer… (CVSS 4.2, Google Chrome)
- [CVE-2026-76036](https://cve.now/CVE-2026-76036.md): Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside… (CVSS 9.6, Google Chrome)
- [CVE-2026-76034](https://cve.now/CVE-2026-76034.md): Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox… (CVSS 8.8, Google Chrome)
- [CVE-2026-16732](https://cve.now/CVE-2026-16732.md): fastify vulnerable to X-Forwarded- spoofing under trustProxy hop-count (CVSS 6.1, fastify)
- [CVE-2026-18504](https://cve.now/CVE-2026-18504.md): fastify vulnerable to schema validation bypass via root primitive coercion mismatch (CVSS 5.4, fastify)
- [CVE-2026-55593](https://cve.now/CVE-2026-55593.md): Froxlor: CSRF Vulnerability in Froxlor AJAX Endpoint — Missing Cross-Site Request Forgery Protection (CVSS 6.5, froxlor · froxlor/froxlor)
- [CVE-2026-54347](https://cve.now/CVE-2026-54347.md): Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover (CVSS 8.7, froxlor · froxlor/froxlor)
- [CVE-2026-54348](https://cve.now/CVE-2026-54348.md): Froxlor: Second-Order SQL Injection via \`Admins.add\` \`ipaddress\` Parameter Allows Full Database Exfiltration (CVSS 7.2, froxlor · froxlor/froxlor)
- [CVE-2026-54543](https://cve.now/CVE-2026-54543.md): Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields (CVSS 5.4, froxlor · froxlor/froxlor)
- [CVE-2026-62988](https://cve.now/CVE-2026-62988.md): Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints (CVSS 9.0, froxlor · froxlor/froxlor)
- [CVE-2026-52793](https://cve.now/CVE-2026-52793.md): Froxlor: API Authentication bypasses 2FA Authentication (CVSS 8.1, froxlor · froxlor/froxlor)
- [CVE-2026-67442](https://cve.now/CVE-2026-67442.md): FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup (CVSS 2.0, frangoteam FUXA)
- [CVE-2026-65984](https://cve.now/CVE-2026-65984.md): FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions (CVSS 7.5, frangoteam FUXA)
- [CVE-2026-67443](https://cve.now/CVE-2026-67443.md): FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution) (CVSS 9.2, frangoteam FUXA)
- [CVE-2026-65985](https://cve.now/CVE-2026-65985.md): FUXA: SSRF hardening for \`device-webapi-request\` (CVSS 6.0, frangoteam FUXA)
- [CVE-2026-67440](https://cve.now/CVE-2026-67440.md): FUXA: Unauthenticated Socket.IO read events (CVSS 6.9, frangoteam FUXA)
- [CVE-2026-47721](https://cve.now/CVE-2026-47721.md): FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions (CVSS 6.3, frangoteam FUXA · fuxa-server)
- [CVE-2026-47719](https://cve.now/CVE-2026-47719.md): FUXA: Unauthenticated SSRF via Socket.IO DEVICE\_WEBAPI\_REQUEST and DEVICE\_PROPERTY with response reading (CVSS 8.2, frangoteam FUXA · fuxa-server)
- [CVE-2026-47720](https://cve.now/CVE-2026-47720.md): FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString (CVSS 5.3, frangoteam FUXA · fuxa-server)
- [CVE-2026-59915](https://cve.now/CVE-2026-59915.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. (CVSS 7.3, Dell Alienware Command Center)
- [CVE-2026-76032](https://cve.now/CVE-2026-76032.md): Pydio Cells 5.0.0 to 5.0.2 - Missing Authorization on the Share Link REST Handler (CVSS 5.3, pydio cells)
- [CVE-2026-49500](https://cve.now/CVE-2026-49500.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link… (CVSS 6.0, Dell Alienware Command Center (AWCC)
- [CVE-2026-75877](https://cve.now/CVE-2026-75877.md): TRENDnet TV-IP751WIC alphapd FUN\_0043372C stack-based overflow (CVSS 9.4, TRENDnet TV-IP751WIC)
- [CVE-2026-12520](https://cve.now/CVE-2026-12520.md): Stack buffer overflow and off-by-one writes in Zephyr HL7800 modem AT response handlers (CVSS 6.4, zephyrproject zephyr)
- [CVE-2026-75936](https://cve.now/CVE-2026-75936.md): Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java (CVSS 7.5, Amazon Ion Java)
- [CVE-2026-75935](https://cve.now/CVE-2026-75935.md): Memory-amplification denial of service via declared-length preallocation in Amazon ion-java (CVSS 7.5, Amazon Ion Java)
- [CVE-2026-52829](https://cve.now/CVE-2026-52829.md): ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book (CVSS 7.5, ZcashFoundation zebra · zebra-network +1)
- [CVE-2026-52736](https://cve.now/CVE-2026-52736.md): ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache (CVSS 8.7, ZcashFoundation zebra · zebra-state +1)
- [CVE-2026-52732](https://cve.now/CVE-2026-52732.md): ZEBRA: Mempool transaction admission denial via single-peer inbound queue saturation (CVSS 5.3, ZcashFoundation zebra · zebrad)
- [CVE-2026-52731](https://cve.now/CVE-2026-52731.md): ZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplate (CVSS 6.5, ZcashFoundation zebra · ZcashFoundation zebra-rpc +2)
- [CVE-2026-52733](https://cve.now/CVE-2026-52733.md): ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop\_tip (CVSS 6.5, ZcashFoundation zebra · ZcashFoundation zebra-state +2)
- [CVE-2026-52738](https://cve.now/CVE-2026-52738.md): ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks (CVSS 6.9, ZcashFoundation zebra · ZcashFoundation zebra-state +2)
- [CVE-2026-52735](https://cve.now/CVE-2026-52735.md): ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser (CVSS 9.3, ZcashFoundation zebra · zebra-script +1)
- [CVE-2026-52739](https://cve.now/CVE-2026-52739.md): ZEBRA: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection (CVSS 5.9, ZcashFoundation zebra · ZcashFoundation zebra-state +2)
- [CVE-2026-52734](https://cve.now/CVE-2026-52734.md): ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel\_handles retention (CVSS 5.3, ZcashFoundation zebra · zebrad)
- [CVE-2026-52737](https://cve.now/CVE-2026-52737.md): ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block (CVSS 5.3, ZcashFoundation zebra · ZcashFoundation zebra-consensus +2)
- [CVE-2026-75876](https://cve.now/CVE-2026-75876.md): xianrendzw EasyReport Move Operations ModuleController.java sql injection (CVSS 5.3, xianrendzw EasyReport)
- [CVE-2026-71417](https://cve.now/CVE-2026-71417.md): Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it (CVSS 7.3, Netflix lemur · lemur)
- [CVE-2026-19671](https://cve.now/CVE-2026-19671.md): Improper handling of highly compressed data (data amplification) in CISA Malcolm (CVSS 7.1, CISAgov Malcolm)
- [CVE-2026-73529](https://cve.now/CVE-2026-73529.md): Plainpad Missing Rate Limiting via POST /v1/sessions (CVSS 6.9, alextselegidis plainpad)
- [CVE-2026-71322](https://cve.now/CVE-2026-71322.md): Lemur: Missing authorization check on POST /certificates/\<id\>/export for plugins with requires\_key = False (CVSS 4.3, Netflix lemur · lemur)
- [CVE-2026-19670](https://cve.now/CVE-2026-19670.md): Incorrect Authorization in CISA Malcolm (CVSS 5.3, CISAgov Malcolm)
- [CVE-2026-71317](https://cve.now/CVE-2026-71317.md): Lemur: Sub-CA creation never checks \`AuthorityPermission\` on the parent authority (CVSS 6.5, Netflix lemur · lemur)
- [CVE-2026-70666](https://cve.now/CVE-2026-70666.md): Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs (CVSS 7.4, Netflix lemur · lemur)
- [CVE-2026-71303](https://cve.now/CVE-2026-71303.md): Lemur: Incomplete fix for CVE-2026-55166 -- ACME authority update endpoint allows non-admin to replace \`acme\_url\` with internal IP… (CVSS 7.7, Netflix lemur · lemur)
- [CVE-2026-71307](https://cve.now/CVE-2026-71307.md): Lemur: Authenticated low-privilege users can read plaintext destination credentials (SFTP password / private-key passphrase) via the… (CVSS 7.7, Netflix lemur · lemur)
- [CVE-2026-71308](https://cve.now/CVE-2026-71308.md): Lemur: Unchecked \`replaces\[\]\` lets any user silence notifications and hijack auto-rotation for arbitrary certificates (CVSS 8.1, Netflix lemur · lemur)
- [CVE-2026-70667](https://cve.now/CVE-2026-70667.md): Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for… (CVSS 6.3, Netflix lemur · lemur)
- [CVE-2026-55164](https://cve.now/CVE-2026-55164.md): Lemur: Plaintext password storage in Lemur user-update path (CVSS 4.9, Netflix lemur · lemur)
- [CVE-2026-55162](https://cve.now/CVE-2026-55162.md): Lemur: Post-authentication SSRF via certificate verification - attacker-controlled CRL and OCSP URLs in uploaded certificates (CVSS 6.3, Netflix lemur · lemur)
- [CVE-2026-55166](https://cve.now/CVE-2026-55166.md): Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme\_url SSRF and creator-equality IDOR (CVSS 9.9, Netflix lemur · lemur)
- [CVE-2026-55163](https://cve.now/CVE-2026-55163.md): Lemur: Privilege escalation via PUT /api/1/roles/\<id\> — non-admin role members can rewrite role membership (CVSS 6.3, Netflix lemur · lemur)
- [CVE-2026-55165](https://cve.now/CVE-2026-55165.md): Lemur : JWT verifier trusts attacker-supplied alg from token header — defense-in-depth gap; chain-dependent ATO with secret disclosure (CVSS 4.8, Netflix lemur · lemur)
- [CVE-2026-17106](https://cve.now/CVE-2026-17106.md): Tar extraction in moby/go-archive can write outside the destination directory via link following (CVSS 7.1, moby go-archive · Docker Sandboxes +5)
- [CVE-2025-9211](https://cve.now/CVE-2025-9211.md): Cross-site scripting in Otalio Ship Property Management System (CVSS 6.7, Otalio Ship Property Management System)
- [CVE-2025-9210](https://cve.now/CVE-2025-9210.md): Missing JSON Web Token signature validation in Otalio Ship Property Management System (CVSS 8.1, Otalio Ship Property Management System)
- [CVE-2026-47630](https://cve.now/CVE-2026-47630.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. (CVSS 5.5, NVIDIA Triton Inference Server)
- [CVE-2026-47629](https://cve.now/CVE-2026-47629.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. (CVSS 7.5, NVIDIA Triton Inference Server)
- [CVE-2026-47628](https://cve.now/CVE-2026-47628.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. (CVSS 7.5, NVIDIA Triton Inference Server)
- [CVE-2026-47627](https://cve.now/CVE-2026-47627.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. (CVSS 9.8, NVIDIA Triton Inference Server)
- [CVE-2026-47606](https://cve.now/CVE-2026-47606.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. (CVSS 6.5, NVIDIA Triton Inference Server)
- [CVE-2026-65959](https://cve.now/CVE-2026-65959.md): Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data (CVSS 5.3, vitessio vitess · vitess.io/vitess)
- [CVE-2026-24185](https://cve.now/CVE-2026-24185.md): NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is… (CVSS 7.1, NVIDIA NVOS)
- [CVE-2026-24184](https://cve.now/CVE-2026-24184.md): NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated… (CVSS 7.5, NVIDIA Cumulus Linux GA · NVIDIA Cumulus Linux LTS)
- [CVE-2026-24183](https://cve.now/CVE-2026-24183.md): NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege… (CVSS 7.8, NVIDIA Cumulus Linux GA)
- [CVE-2026-71551](https://cve.now/CVE-2026-71551.md): Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist (CVSS 7.8, super-productivity)
- [CVE-2026-69160](https://cve.now/CVE-2026-69160.md): OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API (CVSS 6.5, OpenListTeam OpenList · github.com/OpenListTeam/OpenList… +2)
- [CVE-2026-48508](https://cve.now/CVE-2026-48508.md): Lemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission (CVSS 8.8, Netflix lemur · lemur)
- [CVE-2026-75130](https://cve.now/CVE-2026-75130.md): Context7 2.1.2 Prompt Injection via Custom AI Instructions (CVSS 6.4, Uptash Context7)
- [CVE-2026-50167](https://cve.now/CVE-2026-50167.md): Kurrier: Authenticated cross-user authorization bypass in Kurrier API (CVSS 5.3, kurrier-org kurrier)
- [CVE-2026-49452](https://cve.now/CVE-2026-49452.md): WeasyPrint: CSS Injection via Presentational Hints (CVSS 6.5, Kozea WeasyPrint · weasyprint)
- [CVE-2026-73502](https://cve.now/CVE-2026-73502.md): kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a \`content\` parameter whose media type has… (CVSS 5.3, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-61696](https://cve.now/CVE-2026-61696.md): Forem: Stored XSS in Admin Abuse Report Rendering (CVSS 6.3, forem)
- [CVE-2026-71880](https://cve.now/CVE-2026-71880.md): Server-side template injection in Integrated Publishing Toolkit (CVSS 7.6, GBIF Integrated Publishing Toolkit)
- [CVE-2026-75625](https://cve.now/CVE-2026-75625.md): Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass (CVSS 9.1, uber kraken)
- [CVE-2026-53533](https://cve.now/CVE-2026-53533.md): aiosmtplib: SMTP command injection via CR/LF in sender/recipient address (CVSS 6.9, cole aiosmtplib · aiosmtplib)
- [CVE-2026-50161](https://cve.now/CVE-2026-50161.md): libre: Integer overflow in websock\_decode() masked frame length check leads to heap buffer overflow (CVSS 9.3, baresip re)
- [CVE-2026-50143](https://cve.now/CVE-2026-50143.md): Actor MCP path authority injection leaks Apify token (CVSS 8.1, apify-mcp-server · @apify/actors-mcp-server)
- [CVE-2026-32657](https://cve.now/CVE-2026-32657.md): Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax… (CVSS 7.3, Dell AppSync · Dell Metro Node +7)
- [CVE-2026-68923](https://cve.now/CVE-2026-68923.md): MobSF: CSRF checks not enforced after Django migration (CVSS 6.5, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2026-68927](https://cve.now/CVE-2026-68927.md): MobSF: SSRF port restriction bypass in assetlinks\_check (CVSS 3.0, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2026-68922](https://cve.now/CVE-2026-68922.md): MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads (CVSS 5.5, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2026-68924](https://cve.now/CVE-2026-68924.md): MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction (CVSS 4.9, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2026-71879](https://cve.now/CVE-2026-71879.md): Authentication bypass in Integrated Publishing Toolkit (CVSS 9.1, GBIF Integrated Publishing Toolkit)
- [CVE-2026-71878](https://cve.now/CVE-2026-71878.md): Authentication bypass in Integrated Publishing Toolkit (CVSS 9.2, GBIF Integrated Publishing Toolkit)
- [CVE-2026-54570](https://cve.now/CVE-2026-54570.md): AngleSharp: HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass (CVSS 6.9, AngleSharp)
- [CVE-2026-54552](https://cve.now/CVE-2026-54552.md): sh \_uid does not drop supplementary groups (incomplete privilege drop) (CVSS 7.9, amoffat sh · sh)
- [CVE-2026-63640](https://cve.now/CVE-2026-63640.md): MagicMirror socket payload secret placeholder expansion can disclose SECRET\_ environment variables (CVSS 4.3, MagicMirrorOrg MagicMirror · magicmirror)
- [CVE-2026-66780](https://cve.now/CVE-2026-66780.md): Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity (CVSS 6.5, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-74046](https://cve.now/CVE-2026-74046.md): Wazuh 4.4.0 \< 4.14.7 DoS via fdecompress\_files() Zip Bomb (CVSS 6.9, wazuh-manager)
- [CVE-2026-74044](https://cve.now/CVE-2026-74044.md): Wazuh 4.0.0 \< 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello (CVSS 7.0, wazuh-manager)
- [CVE-2026-74039](https://cve.now/CVE-2026-74039.md): Wazuh 4.0.0 \< 4.14.7 API DoS via Deeply Nested JSON auth\_context (CVSS 7.1, wazuh-manager)
- [CVE-2026-74038](https://cve.now/CVE-2026-74038.md): Wazuh 4.0.0 \< 4.14.6 Path Traversal DoS via Agent Enrollment (CVSS 7.0, wazuh-manager)
- [CVE-2026-67262](https://cve.now/CVE-2026-67262.md): Dell PowerStore contains a Missing Authorization vulnerability. (CVSS 8.1, Dell PowerStore)
- [CVE-2026-63642](https://cve.now/CVE-2026-63642.md): MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery (CVSS 6.3, MagicMirrorOrg MagicMirror · magicmirror)
- [CVE-2026-63643](https://cve.now/CVE-2026-63643.md): MagicMirror: ssrf calendar .js (CVSS 6.3, MagicMirrorOrg MagicMirror · magicmirror)
- [CVE-2026-63641](https://cve.now/CVE-2026-63641.md): MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions (CVSS 2.3, MagicMirrorOrg MagicMirror · magicmirror)
- [CVE-2026-44472](https://cve.now/CVE-2026-44472.md): Saleor: Account pre-hijacking vulnerability due to unverified anonymous order merge (CVSS 8.1, saleor)
- [CVE-2026-48744](https://cve.now/CVE-2026-48744.md): Saleor: Anonymous users can modify channel settings via \`channelUpdate\` due to \`all(\[\])\` bypass in permission check (CVSS 6.5, saleor)
- [CVE-2026-66783](https://cve.now/CVE-2026-66783.md): Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref (CVSS 4.4, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-66782](https://cve.now/CVE-2026-66782.md): Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps (CVSS 5.8, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-66781](https://cve.now/CVE-2026-66781.md): Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication (CVSS 5.4, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-75897](https://cve.now/CVE-2026-75897.md): Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards (CVSS 7.5, OpenSearch Dashboards · AWS Amazon OpenSearch Service)
- [CVE-2026-18963](https://cve.now/CVE-2026-18963.md): Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass (CVSS 9.1, Red Hat build of Keycloak · Red Hat JBoss Enterprise App… +2)
- [CVE-2026-57580](https://cve.now/CVE-2026-57580.md): authentik: Account Takeover via SAML NameID Comment Truncation (CVSS 9.4, goauthentik authentik · authentik)
- [CVE-2026-55106](https://cve.now/CVE-2026-55106.md): authentik: Unauthenticated LDAP directory data disclosure (CVSS 5.3, goauthentik authentik)
- [CVE-2026-61574](https://cve.now/CVE-2026-61574.md): authentik RAC: access any endpoint via an unrelated application (CVSS 8.8, goauthentik authentik)
- [CVE-2026-54730](https://cve.now/CVE-2026-54730.md): authentik: Authentication Flow Bypass via Unguarded challenge\_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView (CVSS 8.6, goauthentik authentik)
- [CVE-2026-70415](https://cve.now/CVE-2026-70415.md): Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. (CVSS 8.1, Dell PowerStore · Della PowerStore)
- [CVE-2026-50577](https://cve.now/CVE-2026-50577.md): ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter (CVSS 7.4, fbeta-GmbH ePA3-Service-OpenSource)
- [CVE-2026-50578](https://cve.now/CVE-2026-50578.md): ePA 3.x Integration: TLS Certificate Verification Universally Disabled (CVSS 7.5, fbeta-GmbH ePA3-Service-OpenSource)
- [CVE-2026-52723](https://cve.now/CVE-2026-52723.md): ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust (CVSS 9.1, fbeta-GmbH ePA3-Service-OpenSource)
- [CVE-2026-50576](https://cve.now/CVE-2026-50576.md): ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests (CVSS 6.8, fbeta-GmbH ePA3-Service-OpenSource)
- [CVE-2026-67271](https://cve.now/CVE-2026-67271.md): Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. (CVSS 9.8, Dell PowerStore)
- [CVE-2026-50126](https://cve.now/CVE-2026-50126.md): adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference (CVSS 4.0, KNMI adaguc-server)
- [CVE-2026-19869](https://cve.now/CVE-2026-19869.md): Privilege Escalation via Dropped Field-Level @authentication (CVSS 7.6, @neo4j/graphql)
- [CVE-2026-61634](https://cve.now/CVE-2026-61634.md): RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame\_max (CVSS 0.0, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-63336](https://cve.now/CVE-2026-63336.md): RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM (CVSS 5.1, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-75924](https://cve.now/CVE-2026-75924.md): Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval (CVSS 8.7, Red Hat Multicluster Engine for Kubernetes · Red Hat Advanc…)
- [CVE-2026-63337](https://cve.now/CVE-2026-63337.md): RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading (CVSS 7.5, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-69220](https://cve.now/CVE-2026-69220.md): RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS (CVSS 8.7, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-69219](https://cve.now/CVE-2026-69219.md): RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation (CVSS 8.7, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-63335](https://cve.now/CVE-2026-63335.md): RabbitMQ Java client malformed body frame triggers raw command assembler exception (CVSS 6.3, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-49223](https://cve.now/CVE-2026-49223.md): Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' products (CVSS 7.6, givanz Vvveb)
- [CVE-2026-49224](https://cve.now/CVE-2026-49224.md): Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions (CVSS 8.3, givanz Vvveb)
- [CVE-2026-49222](https://cve.now/CVE-2026-49222.md): Vvveb product question authorization bypass allows Vendors to read, approve, edit, or delete questions under other Vendors' products (CVSS 7.6, givanz Vvveb)
- [CVE-2026-49225](https://cve.now/CVE-2026-49225.md): Vvveb product revision authorization bypass allows Vendors to read, restore, or delete other Vendors' product revisions (CVSS 8.3, givanz Vvveb)
- [CVE-2026-49228](https://cve.now/CVE-2026-49228.md): Vvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' products (CVSS 8.8, givanz Vvveb)
- [CVE-2026-71573](https://cve.now/CVE-2026-71573.md): Joomla! Core - \[20260802\] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-72531](https://cve.now/CVE-2026-72531.md): Joomla! Core - \[20260804\] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS)
- [CVE-2026-73336](https://cve.now/CVE-2026-73336.md): Joomla! Core - \[20260806\] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS · joomla)
- [CVE-2026-73372](https://cve.now/CVE-2026-73372.md): Joomla! Core - \[20260809\] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS)
- [CVE-2026-71572](https://cve.now/CVE-2026-71572.md): Joomla! Core - \[20260801\] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 4.8, Joomla! Project Joomla! CMS)
- [CVE-2026-73337](https://cve.now/CVE-2026-73337.md): Joomla! Core - \[20260807\] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 (CVSS 8.2, Joomla! Project Joomla! CMS)
- [CVE-2026-73371](https://cve.now/CVE-2026-73371.md): Joomla! Core - \[20260808\] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS)
- [CVE-2026-72532](https://cve.now/CVE-2026-72532.md): Joomla! Core - \[20260805\] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS)
- [CVE-2026-73373](https://cve.now/CVE-2026-73373.md): Joomla! Core - \[20260810\] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 8.9, Joomla! Project Joomla! CMS · Joomla! Project Joomla! Fr… +1)
- [CVE-2026-71574](https://cve.now/CVE-2026-71574.md): Joomla! Core - \[20260803\] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 8.5, Joomla! Project Joomla! CMS)
- [CVE-2026-49226](https://cve.now/CVE-2026-49226.md): Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' posts (CVSS 8.3, givanz Vvveb)
- [CVE-2026-49227](https://cve.now/CVE-2026-49227.md): Vvveb comment authorization bypass allows Authors to read, approve, edit, or delete comments under other Authors' posts (CVSS 7.6, givanz Vvveb)
- [CVE-2026-49221](https://cve.now/CVE-2026-49221.md): Vvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assets (CVSS 8.8, givanz Vvveb)
- [CVE-2026-45118](https://cve.now/CVE-2026-45118.md): MyBB: Contact page reflected XSS (CVSS 9.3, mybb)
- [CVE-2026-45117](https://cve.now/CVE-2026-45117.md): MyBB: Installer database configuration RCE (CVSS 9.8, mybb)
- [CVE-2026-45129](https://cve.now/CVE-2026-45129.md): MyBB: ACP Recovery Codes CSRF (CVSS 4.6, mybb)
- [CVE-2026-45124](https://cve.now/CVE-2026-45124.md): MyBB: Mod CP report resolution missing authorization (CVSS 4.3, mybb)
- [CVE-2026-45120](https://cve.now/CVE-2026-45120.md): MyBB: Insufficient authorization for private calendar events (CVSS 5.4, mybb)
- [CVE-2026-47245](https://cve.now/CVE-2026-47245.md): MyBB: Buddy list corruption (CVSS 4.3, mybb)
- [CVE-2026-71365](https://cve.now/CVE-2026-71365.md): Awx: webhook status callback ssrf leaks the git pat (CVSS 7.7, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1)
- [CVE-2026-45734](https://cve.now/CVE-2026-45734.md): MyBB: Default CAPTCHA missing invalidation (CVSS 5.3, mybb)
- [CVE-2026-15806](https://cve.now/CVE-2026-15806.md): \`HTTPPasswordMgr\` can send saved HTTPS credentials via HTTP because of incorrect scheme matching (CVSS 6.0, Python Software Foundation CPython · libpython +2)
- [CVE-2026-12564](https://cve.now/CVE-2026-12564.md): Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf (CVSS 9.6, Red Hat Ansible Automation Platform 2.4 for RHEL · Red H… +2)
- [CVE-2026-45125](https://cve.now/CVE-2026-45125.md): MyBB: Email User CRLF injection (CVSS 5.3, mybb)
- [CVE-2026-45122](https://cve.now/CVE-2026-45122.md): MyBB: Insufficient permission check for calendar event move (CVSS 4.3, mybb)
- [CVE-2026-45119](https://cve.now/CVE-2026-45119.md): MyBB: ACP UTF-8 Conversion CSRF (CVSS 4.6, mybb)
- [CVE-2026-75926](https://cve.now/CVE-2026-75926.md): Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant (CVSS 9.3, gohugoio hugo)
- [CVE-2026-45126](https://cve.now/CVE-2026-45126.md): MyBB: ACP Questions state CSRF (CVSS 3.5, mybb)
- [CVE-2026-45116](https://cve.now/CVE-2026-45116.md): MyBB: Profile field type confusion XSS (CVSS 8.7, mybb)
- [CVE-2026-45115](https://cve.now/CVE-2026-45115.md): MyBB: Buddy/ignore list username XSS (CVSS 8.7, mybb)
- [CVE-2026-45121](https://cve.now/CVE-2026-45121.md): MyBB: Insufficient permission check for calendar select (CVSS 4.3, mybb)
- [CVE-2026-46482](https://cve.now/CVE-2026-46482.md): MyBB: Security Question insufficient validation (CVSS 5.3, mybb)
- [CVE-2026-45123](https://cve.now/CVE-2026-45123.md): MyBB: IPv6 SSRF (CVSS 4.3, mybb)
- [CVE-2026-45128](https://cve.now/CVE-2026-45128.md): MyBB: ACP Users View Manager default CSRF (CVSS 3.5, mybb)
- [CVE-2026-45127](https://cve.now/CVE-2026-45127.md): MyBB: ACP Mass Mail draft resend CSRF (CVSS 3.5, mybb)
- [CVE-2026-55839](https://cve.now/CVE-2026-55839.md): Kestra: Stored XSS via custom Markdown \[\[link\]\] attribute injection (CVSS 8.7, kestra-io kestra · io.kestra:kestra)
- [CVE-2026-73073](https://cve.now/CVE-2026-73073.md): Vim: Arbitrary Ex Command Execution in C Omni-Completion (CVSS 7.1, vim)
- [CVE-2026-71477](https://cve.now/CVE-2026-71477.md): mise: Incorrect file ownership, when installed by the root user using \`install.sh\` (CVSS 6.7, jdx mise)
- [CVE-2026-75915](https://cve.now/CVE-2026-75915.md): CodeWhale before 0.8.64 Environment Variable Leak via js\_execution (CVSS 8.7, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75914](https://cve.now/CVE-2026-75914.md): CodeWhale before 0.8.64 Path Traversal via image\_analyze symlink (CVSS 8.7, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75913](https://cve.now/CVE-2026-75913.md): CodeWhale before 0.8.64 Argument Injection via git\_show (CVSS 8.5, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75912](https://cve.now/CVE-2026-75912.md): CodeWhale before 0.8.64 Argument Injection via git\_blame (CVSS 8.3, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75911](https://cve.now/CVE-2026-75911.md): CodeWhale before 0.8.64 Remote Code Execution via allow\_shell (CVSS 8.5, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-19500](https://cve.now/CVE-2026-19500.md): SureForms contains an uncontrolled resource consumption vulnerability (CVSS 7.5, SureForms)
- [CVE-2026-75904](https://cve.now/CVE-2026-75904.md): libmodplug \<= 0.8.9.1 - Out-of-Bounds Read in pat\_smplooped via Crafted MIDI File (CVSS 4.8, Konstanty Bialkowski libmodplug)
- [CVE-2026-75859](https://cve.now/CVE-2026-75859.md): CodeWhale before 0.8.64 Arbitrary File Read via instructions (CVSS 8.7, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75858](https://cve.now/CVE-2026-75858.md): CodeWhale rlm\_eval before 0.8.64 Remote Code Execution (CVSS 8.5, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75857](https://cve.now/CVE-2026-75857.md): CodeWhale before 0.8.64 Privilege Escalation via exec\_shell\_interact (CVSS 7.3, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75856](https://cve.now/CVE-2026-75856.md): CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU (CVSS 9.2, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-19501](https://cve.now/CVE-2026-19501.md): CVE-2026-19501 (CVSS 8.8, SureForms)
- [CVE-2026-62684](https://cve.now/CVE-2026-62684.md): File Browser: Share API exposes the password hash and bypass token (CVSS 2.7, filebrowser · github.com/filebrowser/filebrowser +1)
- [CVE-2026-62357](https://cve.now/CVE-2026-62357.md): DragonflyDB \`CMS.INITBYDIM\` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write (CVSS 8.8, dragonflydb dragonfly)
- [CVE-2026-75485](https://cve.now/CVE-2026-75485.md): Must-gather: /tmp/kubeconfig retention (CVSS 5.5, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-73834](https://cve.now/CVE-2026-73834.md): Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redaction (CVSS 5.5, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-63328](https://cve.now/CVE-2026-63328.md): Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write (CVSS 6.8, aquasecurity trivy · github.com/aquasecurity/trivy)
- [CVE-2026-45733](https://cve.now/CVE-2026-45733.md): Trilium: Stored XSS in note icon rendering leads to Remote Code Execution in Electron desktop app (CVSS 8.3, TriliumNext Trilium)
- [CVE-2026-68939](https://cve.now/CVE-2026-68939.md): Pyenv: Glob/wildcard metacharacters bypass is\_version\_safe(), causing silent version/interpreter substitution via unquoted expansion… (CVSS 2.0, pyenv)
- [CVE-2026-50187](https://cve.now/CVE-2026-50187.md): Oh My Zsh: Arbitrary Code Execution in oh-my-zsh dotenv plugin via malicious .env files (CVSS 8.8, ohmyzsh)
- [CVE-2026-59825](https://cve.now/CVE-2026-59825.md): Mastodon: Unwanted deactivation of SSL/TLS certificate verification (CVSS 7.4, mastodon)
- [CVE-2026-69189](https://cve.now/CVE-2026-69189.md): Hoppscotch: Cross-user private data exposure and UserHistory IDOR via team GraphQL resolvers (CVSS 7.6, hoppscotch)
- [CVE-2026-66793](https://cve.now/CVE-2026-66793.md): Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon… (CVSS 8.8, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-50139](https://cve.now/CVE-2026-50139.md): goshs: Share-link ?token=… redemption races past download limit (CVSS 5.9, patrickhener goshs · goshs.de/goshs +1)
- [CVE-2026-70657](https://cve.now/CVE-2026-70657.md): Copyparty: file/dirkey confusion (CVSS 4.3, 9001 copyparty · copyparty)
- [CVE-2026-50138](https://cve.now/CVE-2026-50138.md): goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags (CVSS 8.1, patrickhener goshs · goshs.de/goshs/v2 +1)
- [CVE-2026-59949](https://cve.now/CVE-2026-59949.md): yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI) (CVSS 6.5, yawkat lz4-java · at.yawk.lz4:lz4-java +1)
- [CVE-2026-18534](https://cve.now/CVE-2026-18534.md): Address bar spoofing risk in affected iOS versions of Arc Search (CVSS 7.4, The Browser Company of New York ArcSearch)
- [CVE-2026-48798](https://cve.now/CVE-2026-48798.md): SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames (CVSS 7.1, sshnet SSH.NET · SSH.NET)
- [CVE-2026-63632](https://cve.now/CVE-2026-63632.md): ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape (CVSS 3.3, onnx)
- [CVE-2026-71539](https://cve.now/CVE-2026-71539.md): n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution (CVSS 8.9, n8n-io n8n · n8n)
- [CVE-2026-59940](https://cve.now/CVE-2026-59940.md): Seroval: \`seroval.fromJSON()\` Promise resolver type confusion invokes attacker-controlled methods during deserialization (CVSS 9.8, lxsmnsyc seroval · seroval)
- [CVE-2026-75032](https://cve.now/CVE-2026-75032.md): Bluez: bluez: out-of-bounds read in avrcp parse\_media\_element and parse\_media\_folder (CVSS 6.3, Red Hat Enterprise Linux)
- [CVE-2026-61407](https://cve.now/CVE-2026-61407.md): Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. (CVSS 8.8, Dell Watchdog Timer Driver)
- [CVE-2026-73426](https://cve.now/CVE-2026-73426.md): Trix: Stored XSS vulnerability through serialized attributes (CVSS 4.6, basecamp trix · action\_text-trix +1)
- [CVE-2026-75898](https://cve.now/CVE-2026-75898.md): RAGFlow \< 0.26.3 - Server-Side Request Forgery via Agent Invoke Component (CVSS 8.4, infiniflow ragflow)
- [CVE-2026-63639](https://cve.now/CVE-2026-63639.md): Valkey: UAF in stream deserialization may lead to remote code execution (CVSS 8.8, valkey-io valkey)
- [CVE-2026-56684](https://cve.now/CVE-2026-56684.md): Valkey: TLS pending-data processing use-after-free may allow remote code execution (CVSS 7.5, valkey-io valkey)
- [CVE-2026-66046](https://cve.now/CVE-2026-66046.md): Expat Denial of Service via storeAtts() Quadratic Complexity (CVSS 8.7, libexpat project libexpat)
- [CVE-2026-75872](https://cve.now/CVE-2026-75872.md): HTML Injection in MailerUp double opt-in verification email (CVSS 6.9, maalfer MailerUp)
- [CVE-2026-74015](https://cve.now/CVE-2026-74015.md): WordPress Readabler plugin \< 2.0.18 - SQL Injection vulnerability (CVSS 9.3, merkulove Readabler)
- [CVE-2026-74012](https://cve.now/CVE-2026-74012.md): WordPress TaxoPress plugin \<= 3.51.0 - PHP Object Injection vulnerability (CVSS 8.8, TaxoPress)
- [CVE-2026-74009](https://cve.now/CVE-2026-74009.md): WordPress Razorpay for WooCommerce plugin \<= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, Razorpay for WooCommerce)
- [CVE-2026-74008](https://cve.now/CVE-2026-74008.md): WordPress Shortcodes and extra features for Phlox theme plugin \<= 2.17.24 - Sensitive Data Exposure vulnerability (CVSS 5.3, Averta Shortcodes and extra features for Phlox theme)
- [CVE-2026-74007](https://cve.now/CVE-2026-74007.md): WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery plugin \<= 1.16.20 - Sensitive Data Exposure vulnerability (CVSS 5.3, iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Ima…)
- [CVE-2026-74006](https://cve.now/CVE-2026-74006.md): WordPress WP Table Builder plugin \<= 2.2.0 - Broken Access Control vulnerability (CVSS 4.3, WP Table Builder)
- [CVE-2026-74004](https://cve.now/CVE-2026-74004.md): WordPress Gravity Booster &#8211; Styles &amp; Layouts for Gravity Forms plugin \<= 6.0 - Broken Access Control vulnerability (CVSS 5.4, wpmonks Gravity Booster &#8211; Styles &amp; Layouts for Gr…)
- [CVE-2026-74003](https://cve.now/CVE-2026-74003.md): WordPress RomethemeForm For Elementor plugin \<= 1.2.6 - Broken Access Control vulnerability (CVSS 4.3, RomethemeForm For Elementor)
- [CVE-2026-73997](https://cve.now/CVE-2026-73997.md): WordPress Starter Templates by Kadence WP plugin \<= 2.3.3 - Denial of Service Attack vulnerability (CVSS 7.5, Nexcess Starter Templates by Kadence WP)
- [CVE-2026-73996](https://cve.now/CVE-2026-73996.md): WordPress Masteriyo - LMS plugin \<= 2.3.2 - Arbitrary File Upload vulnerability (CVSS 9.8, ThemeGrill Masteriyo - LMS)
- [CVE-2026-73995](https://cve.now/CVE-2026-73995.md): WordPress User Registration plugin \<= 5.2.6 - Broken Authentication vulnerability (CVSS 5.4, wpeverest User Registration)
- [CVE-2026-73994](https://cve.now/CVE-2026-73994.md): WordPress Charitable plugin \<= 1.8.11.3 - Broken Access Control vulnerability (CVSS 7.5, Syed Balkhi Charitable)
- [CVE-2026-73404](https://cve.now/CVE-2026-73404.md): WordPress MasterStudy LMS plugin \<= 3.7.41 - Broken Access Control vulnerability (CVSS 6.5, Stylemix MasterStudy LMS)
- [CVE-2026-73400](https://cve.now/CVE-2026-73400.md): WordPress Restaurant Menu by MotoPress plugin \<= 2.4.11 - Local File Inclusion vulnerability (CVSS 8.1, jetmonsters Restaurant Menu by MotoPress)
- [CVE-2026-73399](https://cve.now/CVE-2026-73399.md): WordPress Flutterwave WooCommerce plugin \<= 3.3.0 - Broken Authentication vulnerability (CVSS 6.5, Flutterwave WooCommerce)
- [CVE-2026-73398](https://cve.now/CVE-2026-73398.md): WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 - Broken Authentication vulnerability (CVSS 6.5, Papaki (Enartia S.A.) Piraeus Bank WooCommerce Payment Gate…)
- [CVE-2026-73397](https://cve.now/CVE-2026-73397.md): WordPress Youzify plugin \<= 1.3.7 - Deserialization of untrusted data vulnerability (CVSS 9.8, Youzify)
- [CVE-2026-73396](https://cve.now/CVE-2026-73396.md): WordPress MWB HubSpot for WooCommerce plugin \<= 1.6.7 - Broken Authentication vulnerability (CVSS 7.1, MakeWebBetter MWB HubSpot for WooCommerce)
- [CVE-2026-73395](https://cve.now/CVE-2026-73395.md): WordPress Booking calendar, Appointment Booking System plugin \<= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, wpdevart Booking calendar, Appointment Booking System)
- [CVE-2026-73393](https://cve.now/CVE-2026-73393.md): WordPress Subscribe2 plugin \<= 10.46 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, weDevs Subscribe2)
- [CVE-2026-73383](https://cve.now/CVE-2026-73383.md): WordPress CTX Feed plugin \<= 6.6.47 - Arbitrary File Download vulnerability (CVSS 4.9, WebAppick CTX Feed)
- [CVE-2026-73382](https://cve.now/CVE-2026-73382.md): WordPress Site Reviews plugin \<= 8.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Gemini Labs Site Reviews)
- [CVE-2026-73381](https://cve.now/CVE-2026-73381.md): WordPress Popup by Supsystic plugin \<= 1.13.0 - Broken Authentication vulnerability (CVSS 9.1, Popup by Supsystic)
- [CVE-2026-73380](https://cve.now/CVE-2026-73380.md): WordPress Popup by Supsystic plugin \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8, Popup by Supsystic)
- [CVE-2026-73379](https://cve.now/CVE-2026-73379.md): WordPress Contact Form by Supsystic plugin \< 1.10.0 - Bypass Vulnerability vulnerability (CVSS 6.5, Contact Form by Supsystic)
- [CVE-2026-73378](https://cve.now/CVE-2026-73378.md): WordPress Contact Form by Supsystic plugin \< 1.10.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Contact Form by Supsystic)
- [CVE-2026-73377](https://cve.now/CVE-2026-73377.md): WordPress Ultimate Maps by Supsystic plugin \< 1.5.0 - Broken Access Control vulnerability (CVSS 7.5, Ultimate Maps by Supsystic)
- [CVE-2026-73376](https://cve.now/CVE-2026-73376.md): WordPress Ultimate Maps by Supsystic plugin \< 1.5.0 - PHP Object Injection vulnerability (CVSS 9.8, Ultimate Maps by Supsystic)
- [CVE-2026-73375](https://cve.now/CVE-2026-73375.md): WordPress Ultimate Maps by Supsystic plugin \< 1.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Ultimate Maps by Supsystic)
- [CVE-2026-73367](https://cve.now/CVE-2026-73367.md): WordPress Easy Google Maps plugin \< 1.14.2 - Remote File Inclusion vulnerability (CVSS 7.2, supsystic Easy Google Maps)
- [CVE-2026-73366](https://cve.now/CVE-2026-73366.md): WordPress Easy Google Maps plugin \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8, supsystic Easy Google Maps)
- [CVE-2026-73365](https://cve.now/CVE-2026-73365.md): WordPress JetAppointment plugin \<= 2.5.2 - SQL Injection vulnerability (CVSS 9.3, Crocoblock. Jetimpex JetAppointment)
- [CVE-2026-73362](https://cve.now/CVE-2026-73362.md): WordPress URL Shortify plugin \<= 2.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, KaizenCoders URL Shortify)
- [CVE-2026-73361](https://cve.now/CVE-2026-73361.md): WordPress Recipe Card Blocks for Gutenberg & Elementor plugin \<= 3.4.18 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPZOOM Recipe Card Blocks for Gutenberg & Elementor)
- [CVE-2026-73360](https://cve.now/CVE-2026-73360.md): WordPress Chaty Pro plugin \<= 3.5.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Premio Chaty Pro)
- [CVE-2026-73359](https://cve.now/CVE-2026-73359.md): WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin \<= 4.3.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy C…)
- [CVE-2026-73358](https://cve.now/CVE-2026-73358.md): WordPress Affiliates Manager plugin \<= 2.9.53 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wp.insider Affiliates Manager)
- [CVE-2026-73356](https://cve.now/CVE-2026-73356.md): WordPress Breeze plugin \<= 2.5.12 - Arbitrary Content Deletion vulnerability (CVSS 8.2, Cloudways Breeze)
- [CVE-2026-73355](https://cve.now/CVE-2026-73355.md): WordPress Affiliates Manager plugin \<= 2.9.53 - SQL Injection vulnerability (CVSS 9.3, wp.insider Affiliates Manager)
- [CVE-2026-73352](https://cve.now/CVE-2026-73352.md): WordPress GiveWP plugin \<= 4.16.5.1 - Broken Access Control vulnerability (CVSS 6.5, Nexcess GiveWP)
- [CVE-2026-73351](https://cve.now/CVE-2026-73351.md): WordPress WordPress Social Login and Register plugin \<= 7.8.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, miniOrange WordPress Social Login and Register)
- [CVE-2026-73350](https://cve.now/CVE-2026-73350.md): WordPress SupportCandy plugin \<= 3.5.1 - Broken Authentication vulnerability (CVSS 8.2, PSM Plugins SupportCandy)
- [CVE-2026-73348](https://cve.now/CVE-2026-73348.md): WordPress GiveWP plugin \< 4.16.6 - Broken Access Control vulnerability (CVSS 6.5, Nexcess GiveWP)
- [CVE-2026-73345](https://cve.now/CVE-2026-73345.md): WordPress License Manager for WooCommerce plugin \<= 3.0.18 - SQL Injection vulnerability (CVSS 7.1, Saad Iqbal License Manager for WooCommerce)
- [CVE-2026-73343](https://cve.now/CVE-2026-73343.md): WordPress WP Compress plugin \< 7.20.01 - Remote Code Execution (RCE) vulnerability (CVSS 10.0, AresIT WP Compress)
- [CVE-2026-75784](https://cve.now/CVE-2026-75784.md): TRENDnet TEW-WLC100 HTTP Header nginx FUN\_0040da4c stack-based overflow (CVSS 10.0, TRENDnet TEW-WLC100)
- [CVE-2026-73342](https://cve.now/CVE-2026-73342.md): WordPress WP Multilang plugin \<= 2.4.31 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Magazine3 WP Multilang)
- [CVE-2026-73341](https://cve.now/CVE-2026-73341.md): WordPress RegistrationMagic plugin \<= 6.0.9.7 - PHP Object Injection vulnerability (CVSS 9.8, Metagauss RegistrationMagic)
- [CVE-2026-73339](https://cve.now/CVE-2026-73339.md): WordPress Modern Events Calendar plugin \< 7.35.0 - SQL Injection vulnerability (CVSS 9.3, Webnus Modern Events Calendar)
- [CVE-2026-73338](https://cve.now/CVE-2026-73338.md): WordPress Autopay plugin \<= 5.0.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Autopay)
- [CVE-2026-73190](https://cve.now/CVE-2026-73190.md): WordPress WPDM – Premium Packages plugin \<= 7.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, W3 Eden WPDM – Premium Packages)
- [CVE-2026-73187](https://cve.now/CVE-2026-73187.md): WordPress Sticky Chat Widget plugin \<= 1.4.2 - SQL Injection vulnerability (CVSS 9.3, gingerplugins Sticky Chat Widget)
- [CVE-2026-73181](https://cve.now/CVE-2026-73181.md): WordPress Extra Product Options & Add-Ons for WooCommerce plugin \< 7.6 - Arbitrary File Download vulnerability (CVSS 7.5, ThemeComplete Extra Product Options & Add-Ons for WooCommer…)
- [CVE-2026-68568](https://cve.now/CVE-2026-68568.md): WordPress MasterStudy LMS plugin \<= 3.7.41 - Privilege Escalation vulnerability (CVSS 6.3, Stylemix MasterStudy LMS)
- [CVE-2026-68567](https://cve.now/CVE-2026-68567.md): WordPress EasyTest – Simplify A/B Testing plugin \<= 1.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Grids EasyTest – Simplify A/B Testing)
- [CVE-2026-68565](https://cve.now/CVE-2026-68565.md): WordPress GeoDirectory plugin \<= 2.8.172 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Paolo GeoDirectory)
- [CVE-2026-66679](https://cve.now/CVE-2026-66679.md): WordPress Appointment Hour Booking plugin \<= 1.5.91 - Broken Access Control vulnerability (CVSS 6.5, codepeople Appointment Hour Booking)
- [CVE-2026-66667](https://cve.now/CVE-2026-66667.md): WordPress Templately plugin \<= 3.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPDeveloper Templately)
- [CVE-2026-66651](https://cve.now/CVE-2026-66651.md): WordPress MultiVendorX plugin \<= 5.0.20 - Broken Access Control vulnerability (CVSS 6.5, MultiVendorX)
- [CVE-2026-66646](https://cve.now/CVE-2026-66646.md): WordPress WP Tab Widget plugin \<= 1.2.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, MyThemeShop WP Tab Widget)
- [CVE-2026-66645](https://cve.now/CVE-2026-66645.md): WordPress Table Of Contents Block plugin \<= 1.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPDeveloper Table Of Contents Block)
- [CVE-2026-66644](https://cve.now/CVE-2026-66644.md): WordPress Typing Effect plugin \<= 1.3.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, 93digital Typing Effect)
- [CVE-2026-66643](https://cve.now/CVE-2026-66643.md): WordPress Wufoo Shortcode plugin \<= 1.55 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, wronganswersonly Wufoo Shortcode)
- [CVE-2026-66641](https://cve.now/CVE-2026-66641.md): WordPress Video Conferencing with Zoom plugin \<= 4.6.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Deepen Bajracharya Video Conferencing with Zoom)
- [CVE-2026-66640](https://cve.now/CVE-2026-66640.md): WordPress Login With Ajax plugin \<= 4.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Marcus (aka @msykes) Login With Ajax)
- [CVE-2026-66639](https://cve.now/CVE-2026-66639.md): WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin \<= 2.0.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPZOOM Forms – Contact Form Plugin for Gutenberg)
- [CVE-2026-66638](https://cve.now/CVE-2026-66638.md): WordPress Frontend Admin by DynamiApps plugin \<= 3.29.10 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Shabti Kaplan Frontend Admin by DynamiApps)
- [CVE-2026-66637](https://cve.now/CVE-2026-66637.md): WordPress Featured Video Plus plugin \<= 2.3.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Alex Featured Video Plus)
- [CVE-2026-66636](https://cve.now/CVE-2026-66636.md): WordPress Wise Chat plugin \<= 3.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Marcin Wise Chat)
- [CVE-2026-66635](https://cve.now/CVE-2026-66635.md): WordPress Slider by 10Web plugin \<= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.4, Slider by 10Web)
- [CVE-2026-66634](https://cve.now/CVE-2026-66634.md): WordPress Modal Survey plugin \<= 2.0.2.2.3 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, Pantherius Modal Survey)
- [CVE-2026-66633](https://cve.now/CVE-2026-66633.md): WordPress Fluent Forms Pro Add On Pack plugin \< 6.2.12 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPManageNinja Fluent Forms Pro Add On Pack)
- [CVE-2026-66629](https://cve.now/CVE-2026-66629.md): WordPress Kirki plugin \<= 6.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themeum Kirki)
- [CVE-2026-66627](https://cve.now/CVE-2026-66627.md): WordPress GP Premium plugin \<= 2.5.5 - Arbitrary File Upload vulnerability (CVSS 9.9, EDGE22 Studios GP Premium)
- [CVE-2026-66622](https://cve.now/CVE-2026-66622.md): WordPress Depicter Slider plugin \<= 4.8.0 - SQL Injection vulnerability (CVSS 7.5, averta Depicter Slider)
- [CVE-2026-66621](https://cve.now/CVE-2026-66621.md): WordPress Ultimate Dashboard Pro plugin \<= 3.11.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Ultimate Dashboard Pro)
- [CVE-2026-66620](https://cve.now/CVE-2026-66620.md): WordPress OptionTree plugin \<= 2.7.3 - PHP Object Injection vulnerability (CVSS 7.2, Derek Herman OptionTree)
- [CVE-2026-32553](https://cve.now/CVE-2026-32553.md): WordPress OttoKit plugin \<= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, Brainstorm Force OttoKit)
- [CVE-2026-32549](https://cve.now/CVE-2026-32549.md): WordPress ThumbPress plugin \< 6.5 - Broken Access Control vulnerability (CVSS 7.5, Codexpert ThumbPress)
- [CVE-2026-32547](https://cve.now/CVE-2026-32547.md): WordPress BP Better Messages plugin \<= 2.15.22 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wordplus BP Better Messages)
- [CVE-2026-32481](https://cve.now/CVE-2026-32481.md): WordPress Ezoic plugin \<= 2.22.11 - Broken Authentication vulnerability (CVSS 7.5, Ezoic)
- [CVE-2026-32474](https://cve.now/CVE-2026-32474.md): WordPress Templatiq plugin \<= 0.2.5 - Arbitrary File Upload vulnerability (CVSS 9.9, wpWax Templatiq)
- [CVE-2026-32473](https://cve.now/CVE-2026-32473.md): WordPress PDF Smart Viewer for Elementor plugin \<= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, DeKnows PDF Smart Viewer for Elementor)
- [CVE-2026-32472](https://cve.now/CVE-2026-32472.md): WordPress Online Contact Widget plugin \<= 1.3.0 - Broken Access Control vulnerability (CVSS 7.5, wbolt.com Online Contact Widget)
- [CVE-2026-32470](https://cve.now/CVE-2026-32470.md): WordPress FundEngine plugin \<= 1.7.9 - PHP Object Injection vulnerability (CVSS 9.8, Roxnor FundEngine)
- [CVE-2026-32468](https://cve.now/CVE-2026-32468.md): WordPress Duitku Payment Gateway plugin \<= 2.11.14 - Sensitive Data Exposure vulnerability (CVSS 7.5, rayhanduitku Duitku Payment Gateway)
- [CVE-2026-32467](https://cve.now/CVE-2026-32467.md): WordPress \[Aotuman\] Grab WeChat Articles plugin \<= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.0, apoyl \[Aotuman\] Grab WeChat Articles)
- [CVE-2026-32466](https://cve.now/CVE-2026-32466.md): WordPress Gravity Forms Bookings premium plugin \<= 2.1 - SQL Injection vulnerability (CVSS 8.5, WPExperts Gravity Forms Bookings premium)
- [CVE-2026-32465](https://cve.now/CVE-2026-32465.md): WordPress Essential Real Estate plugin \<= 5.3.3 - PHP Object Injection vulnerability (CVSS 8.8, g5theme Essential Real Estate)
- [CVE-2026-32464](https://cve.now/CVE-2026-32464.md): WordPress Theme Test Drive plugin \<= 2.9.1 - Local File Inclusion vulnerability (CVSS 8.1, Vladimir Prelovac Theme Test Drive)
- [CVE-2026-32463](https://cve.now/CVE-2026-32463.md): WordPress Sync Post With Other Site plugin \<= 1.9.3 - Arbitrary File Upload vulnerability (CVSS 9.9, Kamlesh Parmar Sync Post With Other Site)
- [CVE-2026-32444](https://cve.now/CVE-2026-32444.md): WordPress Cwicly plugin \<= 1.4.4 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, Cwicly)
- [CVE-2026-32333](https://cve.now/CVE-2026-32333.md): WordPress Mayosis Core plugin \<= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, TeconceTheme Mayosis Core)
- [CVE-2026-28571](https://cve.now/CVE-2026-28571.md): WordPress FormyChat plugin \<= 2.15.7 - Broken Access Control vulnerability (CVSS 7.5, WPPOOL FormyChat)
- [CVE-2026-28570](https://cve.now/CVE-2026-28570.md): WordPress Vavo Core plugin \<= 2.3.0 - Local File Inclusion vulnerability (CVSS 8.1, SpabRice Vavo Core)
- [CVE-2026-28569](https://cve.now/CVE-2026-28569.md): WordPress SSL Zen plugin \<= 4.7.43 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SSL Zen)
- [CVE-2026-28568](https://cve.now/CVE-2026-28568.md): WordPress Quill Forms plugin \<= 5.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Mohamed Magdy Quill Forms)
- [CVE-2026-28567](https://cve.now/CVE-2026-28567.md): WordPress WP Sort Order plugin \<= 1.3.5 - Broken Access Control vulnerability (CVSS 7.5, Fahad Mahmood WP Sort Order)
- [CVE-2026-28192](https://cve.now/CVE-2026-28192.md): WordPress Piotnet Addons For Elementor Pro plugin \<= 7.1.67 - Arbitrary File Upload vulnerability (CVSS 9.6, Piotnet Addons For Elementor Pro)
- [CVE-2026-28191](https://cve.now/CVE-2026-28191.md): WordPress The Grid plugin \<= 2.8.0 - Privilege Escalation vulnerability (CVSS 8.8, ThemeOne The Grid)
- [CVE-2026-17084](https://cve.now/CVE-2026-17084.md): stringprep.map\_table\_b2() deviates from RFC 3454 Table B.2 (CVSS 6.0, Python Software Foundation CPython · libpython +2)
- [CVE-2026-50575](https://cve.now/CVE-2026-50575.md): BetterDesk has a replay behavior vulnerability when devices are deleted (CVSS 7.7, UNITRONIX BetterDesk)
- [CVE-2026-24301](https://cve.now/CVE-2026-24301.md): Microsoft Copilot Information Disclosure Vulnerability (CVSS 8.8, Microsoft Copilot Web)
- [CVE-2026-16309](https://cve.now/CVE-2026-16309.md): IDOR in Netiket Information Technologies' EdoWEB (CVSS 5.3, Netiket Information Technologies EdoWEB)
- [CVE-2026-45532](https://cve.now/CVE-2026-45532.md): DataEase has a Path Traversal Vulnerability (CVSS 8.7, dataease)
- [CVE-2026-75783](https://cve.now/CVE-2026-75783.md): TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow (CVSS 9.4, TRENDnet TEW-WLC100P)
- [CVE-2026-18751](https://cve.now/CVE-2026-18751.md): Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 (CVSS 5.2, Citrix WorkSpace App)
- [CVE-2026-74989](https://cve.now/CVE-2026-74989.md): Internally found bugs fixed in Firefox 154 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74988](https://cve.now/CVE-2026-74988.md): Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74986](https://cve.now/CVE-2026-74986.md): Site isolation issue in the CSS Parsing and Computation component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74985](https://cve.now/CVE-2026-74985.md): Privilege escalation in the Enterprise Policies component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74984](https://cve.now/CVE-2026-74984.md): Race condition in the JavaScript Engine component (CVSS 6.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74982](https://cve.now/CVE-2026-74982.md): Denial-of-service in the Widget component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74981](https://cve.now/CVE-2026-74981.md): Site isolation issue in the Audio/Video: Web Codecs component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74980](https://cve.now/CVE-2026-74980.md): Clickjacking issue in the Downloads component in Firefox for Android (CVSS 6.5, Mozilla Firefox)
- [CVE-2026-74979](https://cve.now/CVE-2026-74979.md): Mitigation bypass in the Add-ons Manager component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74978](https://cve.now/CVE-2026-74978.md): Clickjacking issue in the Widget component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74977](https://cve.now/CVE-2026-74977.md): Integer overflow in the Graphics component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74975](https://cve.now/CVE-2026-74975.md): Spoofing issue in the Downloads component in Firefox for Android (CVSS 5.4, Mozilla Firefox)
- [CVE-2026-74970](https://cve.now/CVE-2026-74970.md): Site isolation issue in the Graphics component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74968](https://cve.now/CVE-2026-74968.md): Site isolation issue in the Graphics: WebRender component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74966](https://cve.now/CVE-2026-74966.md): Information disclosure in the Form Autofill component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74961](https://cve.now/CVE-2026-74961.md): Side-channel in the Web Audio component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74958](https://cve.now/CVE-2026-74958.md): Information disclosure in the WebRTC component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74956](https://cve.now/CVE-2026-74956.md): Same-origin policy bypass in the DOM: Service Workers component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74955](https://cve.now/CVE-2026-74955.md): Privilege escalation in the Request Handling component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74954](https://cve.now/CVE-2026-74954.md): Information disclosure due to side-channel in the Storage: Cache API component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74952](https://cve.now/CVE-2026-74952.md): Privilege escalation in the Application Update component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74951](https://cve.now/CVE-2026-74951.md): Clickjacking issue in Firefox for Android (CVSS 6.5, Mozilla Firefox)
- [CVE-2026-74950](https://cve.now/CVE-2026-74950.md): Privilege escalation in the Downloads API component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74947](https://cve.now/CVE-2026-74947.md): Privilege escalation due to invalid pointer in the Graphics component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74938](https://cve.now/CVE-2026-74938.md): Mitigation bypass in the JavaScript: GC component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74937](https://cve.now/CVE-2026-74937.md): Use-after-free in the JavaScript: GC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-75874](https://cve.now/CVE-2026-75874.md): Sandbox escape in the Remote Settings Client component (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74990](https://cve.now/CVE-2026-74990.md): Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74987](https://cve.now/CVE-2026-74987.md): Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74983](https://cve.now/CVE-2026-74983.md): Mitigation bypass in the Data Loss Prevention component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74976](https://cve.now/CVE-2026-74976.md): JIT miscompilation in the JavaScript Engine: JIT component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74974](https://cve.now/CVE-2026-74974.md): Same-origin policy bypass in the Graphics: ImageLib component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74973](https://cve.now/CVE-2026-74973.md): Race condition, use-after-free in the Graphics component (CVSS 4.2, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74972](https://cve.now/CVE-2026-74972.md): Information disclosure in the DOM: Push Subscriptions component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74971](https://cve.now/CVE-2026-74971.md): Information disclosure in the DOM: UI Events & Focus Handling component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74969](https://cve.now/CVE-2026-74969.md): Race condition, use-after-free in the Layout: Text and Fonts component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74967](https://cve.now/CVE-2026-74967.md): Same-origin policy bypass in the Audio/Video: Playback component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74965](https://cve.now/CVE-2026-74965.md): Privilege escalation in the Shell Integration component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74964](https://cve.now/CVE-2026-74964.md): Integer overflow in the Graphics component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74963](https://cve.now/CVE-2026-74963.md): Same-origin policy bypass in the Networking: Cookies component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74962](https://cve.now/CVE-2026-74962.md): Site isolation issue in the Networking: Cookies component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74960](https://cve.now/CVE-2026-74960.md): Site isolation issue in the WebExtensions component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74959](https://cve.now/CVE-2026-74959.md): Mitigation bypass in the Storage: Cache API component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74957](https://cve.now/CVE-2026-74957.md): Mitigation bypass in the Safe Browsing component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74953](https://cve.now/CVE-2026-74953.md): Privilege escalation in the Networking: Cookies component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74949](https://cve.now/CVE-2026-74949.md): Use-after-free in the Graphics: Canvas2D component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74948](https://cve.now/CVE-2026-74948.md): Information disclosure in the Graphics component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74946](https://cve.now/CVE-2026-74946.md): Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74945](https://cve.now/CVE-2026-74945.md): Information disclosure in the Graphics: Text component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74944](https://cve.now/CVE-2026-74944.md): Use-after-free in the DOM: Core & HTML component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74943](https://cve.now/CVE-2026-74943.md): Use-after-free in the Graphics: ImageLib component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74942](https://cve.now/CVE-2026-74942.md): Privilege escalation in the Remote Settings Client component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74941](https://cve.now/CVE-2026-74941.md): Privilege escalation in the Graphics: CanvasWebGL component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74940](https://cve.now/CVE-2026-74940.md): Use-after-free in the Graphics: Text component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74939](https://cve.now/CVE-2026-74939.md): Privilege escalation in the DOM: Navigation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74936](https://cve.now/CVE-2026-74936.md): Use-after-free in the JavaScript: WebAssembly component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74935](https://cve.now/CVE-2026-74935.md): Privilege escalation in the DOM: Networking component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74934](https://cve.now/CVE-2026-74934.md): Site isolation issue in the Graphics: CanvasWebGL component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-59781](https://cve.now/CVE-2026-59781.md): Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions… (CVSS 5.4, Zabbix)
- [CVE-2026-23938](https://cve.now/CVE-2026-23938.md): Server DoS via JavaScript preprocessing or script items (CVSS 2.1, Zabbix)
- [CVE-2026-23937](https://cve.now/CVE-2026-23937.md): Host PSK extraction in Zabbix API (CVSS 6.0, Zabbix)
- [CVE-2026-23935](https://cve.now/CVE-2026-23935.md): Use-after-free read in script item/preprocessing HttpRequest body (CVSS 6.8, Zabbix)
- [CVE-2026-23934](https://cve.now/CVE-2026-23934.md): Frontend DoS via the validate.api.exists action (CVSS 5.1, Zabbix)
- [CVE-2026-23933](https://cve.now/CVE-2026-23933.md): Hardcoded session key in Zabbix 7.4 (CVSS 7.7, Zabbix)
- [CVE-2026-23931](https://cve.now/CVE-2026-23931.md): Frontend plaintext macro value enumeration via the validatate.api.exists action (CVSS 5.3, Zabbix)
- [CVE-2026-23930](https://cve.now/CVE-2026-23930.md): Frontend DoS via the popup.testtriggerexpr action (CVSS 5.3, Zabbix)
- [CVE-2026-23929](https://cve.now/CVE-2026-23929.md): Prototype pollution leading to stored XSS (CVSS 8.5, Zabbix)
- [CVE-2026-1199](https://cve.now/CVE-2026-1199.md): API and Frontend login lockout race condition (CVSS 6.9, Zabbix)
- [CVE-2026-75778](https://cve.now/CVE-2026-75778.md): code-projects Task Management System Login Form index.php select\_with\_multiple\_condition sql injection (CVSS 6.9, code-projects Task Management System)
- [CVE-2026-23922](https://cve.now/CVE-2026-23922.md): Email media OAuth secret leak to Super Admin (CVSS 2.1, Zabbix)
- [CVE-2026-5224](https://cve.now/CVE-2026-5224.md): Sensitive Data Exposure in Kriptek Crypto's Cryptosim (CVSS 5.7, Kriptok Crypto and Information Technologies Industry Trade…)
- [CVE-2026-15585](https://cve.now/CVE-2026-15585.md): Path Traversal in AKIN Software's Wolvox9 ERP (CVSS 7.5, AKIN Software Computer Import Export Industry and Trade AKI…)
- [CVE-2026-75855](https://cve.now/CVE-2026-75855.md): ArcadeDB before 26.8.1 Path Traversal via create/drop database (CVSS 8.4, ArcadeData arcadedb)
- [CVE-2026-75854](https://cve.now/CVE-2026-75854.md): ArcadeDB Redis Wire-Protocol Plugin Missing Authentication (CVSS 9.3, ArcadeData arcadedb)
- [CVE-2026-75853](https://cve.now/CVE-2026-75853.md): ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Database (CVSS 8.7, ArcadeData arcadedb)
- [CVE-2026-75852](https://cve.now/CVE-2026-75852.md): ArcadeDB MongoDB wire protocol authentication bypass cross-database (CVSS 9.3, ArcadeData arcadedb)
- [CVE-2026-75851](https://cve.now/CVE-2026-75851.md): ArcadeDB before 26.8.1 Authentication Bypass via Async Command (CVSS 9.4, ArcadeData arcadedb)
- [CVE-2026-75850](https://cve.now/CVE-2026-75850.md): ArcadeDB before 26.8.1 Per-Type ACL Bypass via Batch Handlers (CVSS 2.3, ArcadeData arcadedb)
- [CVE-2026-75846](https://cve.now/CVE-2026-75846.md): ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION (CVSS 7.1, ArcadeData arcadedb)
- [CVE-2026-75845](https://cve.now/CVE-2026-75845.md): ArcadeDB 26.4.2 before 26.8.1 Authorization Bypass via set\_server\_setting (CVSS 5.3, ArcadeData arcadedb)
- [CVE-2026-75844](https://cve.now/CVE-2026-75844.md): ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypass (CVSS 7.1, ArcadeData arcadedb)
- [CVE-2026-75843](https://cve.now/CVE-2026-75843.md): ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction (CVSS 9.4, ArcadeData arcadedb)
- [CVE-2026-75842](https://cve.now/CVE-2026-75842.md): ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV (CVSS 8.3, ArcadeData arcadedb)
- [CVE-2026-75841](https://cve.now/CVE-2026-75841.md): ArcadeDB before 26.8.1 Denial of Service via range() (CVSS 5.3, ArcadeData arcadedb)
- [CVE-2026-75840](https://cve.now/CVE-2026-75840.md): ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex (CVSS 8.7, ArcadeData arcadedb)
- [CVE-2026-75839](https://cve.now/CVE-2026-75839.md): ArcadeDB before 26.8.1 Information Disclosure via Cluster Endpoints (CVSS 5.3, ArcadeData arcadedb)
- [CVE-2026-75838](https://cve.now/CVE-2026-75838.md): DOMPurify before 3.4.13 Cross-Site Scripting via IN\_PLACE hook (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-75837](https://cve.now/CVE-2026-75837.md): Grav before 2.0.14 Privilege Escalation via Group Access Field (CVSS 9.3, getgrav grav · getgrav/grav)
- [CVE-2026-75836](https://cve.now/CVE-2026-75836.md): Grav API Plugin before 1.0.14 Missing Authorization (CVSS 8.7, getgrav grav)
- [CVE-2026-75835](https://cve.now/CVE-2026-75835.md): Grav API Plugin before 1.0.14 Missing Authorization (CVSS 9.3, getgrav grav)
- [CVE-2026-75834](https://cve.now/CVE-2026-75834.md): Grav before 2.0.14 Stored XSS via Invalid UTF-8 Byte (CVSS 5.1, getgrav grav · getgrav/grav)
- [CVE-2026-75833](https://cve.now/CVE-2026-75833.md): Grav API Plugin Open Redirect via Backslash Bypass (CVSS 8.6, getgrav grav)
- [CVE-2026-75832](https://cve.now/CVE-2026-75832.md): Grav API Plugin before 1.0.14 Authorization Bypass (CVSS 9.3, getgrav grav)
- [CVE-2026-75831](https://cve.now/CVE-2026-75831.md): Grav before 2.0.15 Stored XSS via audio/video source URL (CVSS 5.1, getgrav grav · getgrav/grav)
- [CVE-2026-75830](https://cve.now/CVE-2026-75830.md): grav-plugin-api before 1.0.15 Path Traversal via batchCopy (CVSS 7.1, getgrav grav)
- [CVE-2026-75829](https://cve.now/CVE-2026-75829.md): grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint (CVSS 8.6, getgrav grav)
- [CVE-2026-75828](https://cve.now/CVE-2026-75828.md): Grav before 2.0.15 Stored XSS via detectXss() Quote Bypass (CVSS 9.3, getgrav grav · getgrav/grav)
- [CVE-2026-75827](https://cve.now/CVE-2026-75827.md): Grav before 2.0.15 Arbitrary File Write via error\_log (CVSS 9.3, getgrav grav · getgrav/grav)
- [CVE-2026-75107](https://cve.now/CVE-2026-75107.md): Grav Form Plugin before 9.1.19 Stored XSS via Field Properties (CVSS 5.1, getgrav grav)
- [CVE-2026-74908](https://cve.now/CVE-2026-74908.md): Grav plugin-api before 1.0.15 Script Injection via SVG (CVSS 5.1, getgrav grav)
- [CVE-2026-74907](https://cve.now/CVE-2026-74907.md): Grav before 2.0.15 Path Traversal via plugin-asset-map.php (CVSS 8.2, getgrav grav · getgrav/grav)
- [CVE-2026-74906](https://cve.now/CVE-2026-74906.md): SiYuan before v3.7.4 Incorrect Authorization via Publish Access (CVSS 8.7, siyuan-note siyuan)
- [CVE-2026-74905](https://cve.now/CVE-2026-74905.md): SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass (CVSS 6.9, siyuan-note siyuan)
- [CVE-2026-74904](https://cve.now/CVE-2026-74904.md): SiYuan before v3.7.4 Missing Authorization via block API (CVSS 8.7, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-74903](https://cve.now/CVE-2026-74903.md): SiYuan before v3.7.4 Insufficient Access Control via spinBlockDOM (CVSS 5.3, siyuan-note siyuan)
- [CVE-2026-74902](https://cve.now/CVE-2026-74902.md): SiYuan before v3.7.4 XSS-to-RCE via malicious filename upload (CVSS 9.3, siyuan-note siyuan)
- [CVE-2026-75774](https://cve.now/CVE-2026-75774.md): karakeep-app karakeep OAuth Sign-In auth.ts improper authentication (CVSS 6.3, karakeep-app karakeep)
- [CVE-2026-19608](https://cve.now/CVE-2026-19608.md): Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies (CVSS 5.3, Red Hat build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-75773](https://cve.now/CVE-2026-75773.md): karakeep-app karakeep Login Endpoint auth.ts authorize excessive authentication (CVSS 6.3, karakeep-app karakeep)
- [CVE-2026-19447](https://cve.now/CVE-2026-19447.md): Stored XSS in Fileorbis Informatics's FileOrbis (CVSS 5.4, Fileorbis Informatics Services Trade FileOrbis)
- [CVE-2026-75627](https://cve.now/CVE-2026-75627.md): Bastillion Authentication Bypass via Path-Prefix Routing Mismatch (CVSS 9.3, bastillion-io Bastillion)
- [CVE-2026-75626](https://cve.now/CVE-2026-75626.md): SpiderFoot Stored Cross-Site Scripting via Correlation Titles (CVSS 9.3, smicallef spiderfoot)
- [CVE-2024-14046](https://cve.now/CVE-2024-14046.md): OpenBoxes Document Upload Controller DocumentController.groovy DocumentController unrestricted upload (CVSS 5.3, OpenBoxes)
- [CVE-2026-18929](https://cve.now/CVE-2026-18929.md): Resource Exhaustion in Carbone (CVSS 6.9, Carbone)
- [CVE-2026-43971](https://cve.now/CVE-2026-43971.md): Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow\_link:link/1 (CVSS 6.3, ninenines cowlib · cowlib)
- [CVE-2024-14045](https://cve.now/CVE-2024-14045.md): OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization (CVSS 5.3, OpenBoxes)
- [CVE-2026-34884](https://cve.now/CVE-2026-34884.md): Apache SkyWalking MCP: SSRF via set\_skywalking\_url Tool and GraphQL Expression Injection in MCP Server (CVSS 9.8, Apache Software Foundation Apache SkyWalking MCP)
- [CVE-2026-15371](https://cve.now/CVE-2026-15371.md): Velociraptor Stored XSS in URL column types (CVSS 8.1, Rapid7 Velociraptor)
- [CVE-2026-75091](https://cve.now/CVE-2026-75091.md): Quill Forms \<= 5.7.1 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, mdmag Quill Forms | Conversational Multi Step Forms, Survey…)
- [CVE-2026-15748](https://cve.now/CVE-2026-15748.md): Forminator Forms \<= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration (CVSS 9.8, wpmudev Forminator Forms – Contact Form, Payment Form & Cus…)
- [CVE-2026-11801](https://cve.now/CVE-2026-11801.md): WPAdverts \<= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint (CVSS 7.5, gwin WPAdverts – Classifieds Plugin)
- [CVE-2026-75151](https://cve.now/CVE-2026-75151.md): SourceCodester Onlne Examination & Learning Management System cross-site request forgery (CVSS 5.3, SourceCodester Onlne Examination & Learning Management Syst…)
- [CVE-2026-75094](https://cve.now/CVE-2026-75094.md): COMFAST CF-N1-S CGI mbox-config sub\_44B438 os command injection (CVSS 9.4, COMFAST CF-N1-S)
- [CVE-2026-75093](https://cve.now/CVE-2026-75093.md): sonos tract ONNX Initializer Loader tensor.rs from\_raw\_dt\_align buffer size (CVSS 5.3, sonos tract)
- [CVE-2026-75090](https://cve.now/CVE-2026-75090.md): EricLBuehler Mistral.rs GGUF Tokenizer gguf\_tokenizer.rs convert\_gguf\_to\_hf\_tokenizer out-of-bounds (CVSS 5.3, EricLBuehler Mistral.rs)
- [CVE-2026-75089](https://cve.now/CVE-2026-75089.md): PHPGurukul Complaint Management System check\_availability.php sql injection (CVSS 6.9, PHPGurukul Complaint Management System)
- [CVE-2026-75088](https://cve.now/CVE-2026-75088.md): itsourcecode Hospital Management System viewbilling.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-75087](https://cve.now/CVE-2026-75087.md): itsourcecode Hospital Management System viewdepartment.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-75086](https://cve.now/CVE-2026-75086.md): itsourcecode Hospital Management System viewroom.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-75082](https://cve.now/CVE-2026-75082.md): Webkul Bagisto Customer-Registration Notification Email register cross site scripting (CVSS 5.3, Webkul Bagisto)
- [CVE-2021-43716](https://cve.now/CVE-2021-43716.md): Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. (CVSS 9.8)
- [CVE-2021-43717](https://cve.now/CVE-2021-43717.md): An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6. (CVSS 9.8)
- [CVE-2021-43718](https://cve.now/CVE-2021-43718.md): An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a… (CVSS 5.3)
- [CVE-2026-30250](https://cve.now/CVE-2026-30250.md): Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote… (CVSS 6.1)
- [CVE-2026-52480](https://cve.now/CVE-2026-52480.md): An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service (CVSS 6.5)
- [CVE-2026-52481](https://cve.now/CVE-2026-52481.md): An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp\_actions()… (CVSS 7.5)
- [CVE-2026-52606](https://cve.now/CVE-2026-52606.md): A reflected cross-site scripting (XSS) vulnerability in reportico-web \<= 8.1.0 allows remote attackers to execute arbitrary JavaScript in… (CVSS 6.1)
- [CVE-2026-52607](https://cve.now/CVE-2026-52607.md): A directory traversal vulnerability in reportico-web \<= 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web… (CVSS 6.5)
- [CVE-2026-52608](https://cve.now/CVE-2026-52608.md): An incorrect access control vulnerability in reportico-web \<= 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into… (CVSS 9.8)
- [CVE-2026-52609](https://cve.now/CVE-2026-52609.md): A reflected cross-site scripting (XSS) vulnerability in reportico-web \<= 8.1.0 allows remote attackers to execute arbitrary JavaScript in… (CVSS 6.1)
- [CVE-2026-52610](https://cve.now/CVE-2026-52610.md): An arbitrary file write/directory traversal vulnerability in reportico-web \<= 8.1.0 allows remote attackers to create or overwrite files… (CVSS 9.1)
- [CVE-2026-57826](https://cve.now/CVE-2026-57826.md): An issue was discovered in openHiTLS 0.2.0 through 0.3.2. (CVSS 6.8)
- [CVE-2026-67846](https://cve.now/CVE-2026-67846.md): Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect privilege assignment… (CVSS 7.8)
- [CVE-2026-67920](https://cve.now/CVE-2026-67920.md): An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the… (CVSS 8.8)
- [CVE-2026-67921](https://cve.now/CVE-2026-67921.md): Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the… (CVSS 9.3)
- [CVE-2026-71675](https://cve.now/CVE-2026-71675.md): An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap\_send\_to\_nas() function in src/amf/ngap-path.c (CVSS 7.5)
- [CVE-2026-71676](https://cve.now/CVE-2026-71676.md): Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain… (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2026-08-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.