# CVEs published 2026-07-21

1,474 CVEs were published on July 21, 2026: 308 critical, 650 high. Days are UTC.

- [CVE-2026-16489](https://cve.now/CVE-2026-16489.md): jsforce SFDX Connection Registry sfdx.js \_execCommand os command injection (CVSS 4.8, jsforce)
- [CVE-2026-16488](https://cve.now/CVE-2026-16488.md): QUSETIONS MiniCode-Python Project File config.py subprocess.Popen os command injection (CVSS 2.3, QUSETIONS MiniCode-Python)
- [CVE-2026-63263](https://cve.now/CVE-2026-63263.md): Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-63262](https://cve.now/CVE-2026-63262.md): Missing Authorization in Kibana Leading to Information Disclosure (CVSS 4.3, Elastic Kibana)
- [CVE-2026-63261](https://cve.now/CVE-2026-63261.md): Uncontrolled Resource Consumption in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-63260](https://cve.now/CVE-2026-63260.md): Uncontrolled Resource Consumption in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-16486](https://cve.now/CVE-2026-16486.md): SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting (CVSS 5.3, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-16517](https://cve.now/CVE-2026-16517.md): Libarchive: libarchive: signed integer overflow in archive\_write\_zip\_header (CVSS 2.9, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-63259](https://cve.now/CVE-2026-63259.md): Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure (CVSS 4.3, Elastic Kibana)
- [CVE-2026-63145](https://cve.now/CVE-2026-63145.md): Incorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity Compromise (CVSS 4.3, Elastic Kibana)
- [CVE-2026-63144](https://cve.now/CVE-2026-63144.md): Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-56820](https://cve.now/CVE-2026-56820.md): Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks (CVSS 7.4, netty · io.netty:netty-handler-ssl-ocsp)
- [CVE-2026-56819](https://cve.now/CVE-2026-56819.md): Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS) (CVSS 7.5, netty · io.netty:netty-codec-http2)
- [CVE-2026-63143](https://cve.now/CVE-2026-63143.md): Missing Authorization in Kibana Leading to Unauthorized Information Disclosure (CVSS 4.3, Elastic Kibana)
- [CVE-2026-56817](https://cve.now/CVE-2026-56817.md): Netty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabled (CVSS 8.3, netty · io.netty:netty-codec-xml)
- [CVE-2026-63142](https://cve.now/CVE-2026-63142.md): Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery (CVSS 5.0, Elastic Kibana)
- [CVE-2026-16424](https://cve.now/CVE-2026-16424.md): Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process (CVSS 9.6, Google Chrome)
- [CVE-2026-16423](https://cve.now/CVE-2026-16423.md): Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestur (CVSS 8.8, Google Chrome)
- [CVE-2026-16422](https://cve.now/CVE-2026-16422.md): Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privile (CVSS 7.5, Google Chrome)
- [CVE-2026-16419](https://cve.now/CVE-2026-16419.md): Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a (CVSS 9.6, Google Chrome)
- [CVE-2026-16418](https://cve.now/CVE-2026-16418.md): Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-16417](https://cve.now/CVE-2026-16417.md): Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to lea (CVSS 3.1, Google Chrome)
- [CVE-2026-16416](https://cve.now/CVE-2026-16416.md): Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via (CVSS 9.3, Google Chrome)
- [CVE-2026-16415](https://cve.now/CVE-2026-16415.md): Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to spoof the con (CVSS 5.4, Google Chrome)
- [CVE-2026-16414](https://cve.now/CVE-2026-16414.md): Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially pe (CVSS 9.3, Google Chrome)
- [CVE-2026-16413](https://cve.now/CVE-2026-16413.md): Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-16421](https://cve.now/CVE-2026-16421.md): Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-16420](https://cve.now/CVE-2026-16420.md): Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-16485](https://cve.now/CVE-2026-16485.md): SourceCodester Class and Exam Timetabling System class.php cross site scripting (CVSS 5.3, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-56816](https://cve.now/CVE-2026-56816.md): Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types (CVSS 7.5, netty · io.netty:netty-codec-http3)
- [CVE-2026-65319](https://cve.now/CVE-2026-65319.md): Feedbin Unauthenticated Entry Content Disclosure via GET /api/v2/entries/:id/text (CVSS 8.7, Feedbin)
- [CVE-2026-62574](https://cve.now/CVE-2026-62574.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install (CVSS 7.8, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-62567](https://cve.now/CVE-2026-62567.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). (CVSS 7.7, Oracle HRMS)
- [CVE-2026-62565](https://cve.now/CVE-2026-62565.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). (CVSS 7.1, Oracle HRMS)
- [CVE-2026-62563](https://cve.now/CVE-2026-62563.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Work in Process)
- [CVE-2026-62562](https://cve.now/CVE-2026-62562.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle HRMS)
- [CVE-2026-62561](https://cve.now/CVE-2026-62561.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.8, Oracle HRMS)
- [CVE-2026-62560](https://cve.now/CVE-2026-62560.md): Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle HRMS)
- [CVE-2026-62559](https://cve.now/CVE-2026-62559.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.8, Oracle HRMS)
- [CVE-2026-62557](https://cve.now/CVE-2026-62557.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). (CVSS 7.1, Oracle HRMS)
- [CVE-2026-62556](https://cve.now/CVE-2026-62556.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle HRMS)
- [CVE-2026-62549](https://cve.now/CVE-2026-62549.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). (CVSS 9.6, Oracle HRMS)
- [CVE-2026-62548](https://cve.now/CVE-2026-62548.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle HRMS)
- [CVE-2026-62547](https://cve.now/CVE-2026-62547.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 8.1, Oracle Workflow)
- [CVE-2026-62546](https://cve.now/CVE-2026-62546.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). (CVSS 9.1, Oracle Applications Framework)
- [CVE-2026-62542](https://cve.now/CVE-2026-62542.md): Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits). (CVSS 6.3, Oracle Advanced Benefits)
- [CVE-2026-62534](https://cve.now/CVE-2026-62534.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). (CVSS 8.8, Oracle Applications Framework)
- [CVE-2026-62530](https://cve.now/CVE-2026-62530.md): Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). (CVSS 8.1, Oracle HRMS)
- [CVE-2026-62528](https://cve.now/CVE-2026-62528.md): Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Install). (CVSS 6.3, Oracle HCM Configuration Workbench)
- [CVE-2026-62527](https://cve.now/CVE-2026-62527.md): Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). (CVSS 6.3, Oracle Learning Management)
- [CVE-2026-62525](https://cve.now/CVE-2026-62525.md): Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality Workbench HTML system). (CVSS 6.3, Oracle Quality)
- [CVE-2026-62524](https://cve.now/CVE-2026-62524.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). (CVSS 6.3, Oracle HRMS)
- [CVE-2026-62521](https://cve.now/CVE-2026-62521.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). (CVSS 7.5, Oracle HRMS)
- [CVE-2026-62519](https://cve.now/CVE-2026-62519.md): Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succession plan). (CVSS 6.3, Oracle Succession planning)
- [CVE-2026-62518](https://cve.now/CVE-2026-62518.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Production Scheduling)
- [CVE-2026-62517](https://cve.now/CVE-2026-62517.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.3, Oracle Production Scheduling)
- [CVE-2026-62516](https://cve.now/CVE-2026-62516.md): Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security). (CVSS 8.8, Oracle Demantra Demand Management)
- [CVE-2026-62515](https://cve.now/CVE-2026-62515.md): Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Advanced Planning Command Center)
- [CVE-2026-62514](https://cve.now/CVE-2026-62514.md): Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Regulatory Management)
- [CVE-2026-62513](https://cve.now/CVE-2026-62513.md): Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.5, Oracle Process Manufacturing Regulatory Management)
- [CVE-2026-62508](https://cve.now/CVE-2026-62508.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.1, Oracle Time and Labor)
- [CVE-2026-62507](https://cve.now/CVE-2026-62507.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.3, Oracle Time and Labor)
- [CVE-2026-62505](https://cve.now/CVE-2026-62505.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.1, Oracle Time and Labor)
- [CVE-2026-62504](https://cve.now/CVE-2026-62504.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Time and Labor)
- [CVE-2026-62503](https://cve.now/CVE-2026-62503.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.7, Oracle Time and Labor)
- [CVE-2026-62498](https://cve.now/CVE-2026-62498.md): Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Flow Manufacturing)
- [CVE-2026-62497](https://cve.now/CVE-2026-62497.md): Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Flow Manufacturing)
- [CVE-2026-62496](https://cve.now/CVE-2026-62496.md): Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Yard Management)
- [CVE-2026-62495](https://cve.now/CVE-2026-62495.md): Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Process Manufacturing Process Execution)
- [CVE-2026-62494](https://cve.now/CVE-2026-62494.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Time and Labor)
- [CVE-2026-62493](https://cve.now/CVE-2026-62493.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Purchasing)
- [CVE-2026-62490](https://cve.now/CVE-2026-62490.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.3, Oracle Contracts Integration)
- [CVE-2026-62489](https://cve.now/CVE-2026-62489.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 4.2, Oracle Contracts Integration)
- [CVE-2026-62488](https://cve.now/CVE-2026-62488.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Contracts Integration)
- [CVE-2026-62487](https://cve.now/CVE-2026-62487.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.1, Oracle Contracts Integration)
- [CVE-2026-62486](https://cve.now/CVE-2026-62486.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.0, Oracle Contracts Integration)
- [CVE-2026-62484](https://cve.now/CVE-2026-62484.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.9, Oracle Contracts Integration)
- [CVE-2026-62483](https://cve.now/CVE-2026-62483.md): Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). (CVSS 4.3, Oracle Project Contracts)
- [CVE-2026-62482](https://cve.now/CVE-2026-62482.md): Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Public Sector Financials)
- [CVE-2026-62480](https://cve.now/CVE-2026-62480.md): Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Public Sector Financials)
- [CVE-2026-62479](https://cve.now/CVE-2026-62479.md): Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Public Sector Financials)
- [CVE-2026-62478](https://cve.now/CVE-2026-62478.md): Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Public Sector Financials)
- [CVE-2026-62476](https://cve.now/CVE-2026-62476.md): Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Public Sector Payroll)
- [CVE-2026-62474](https://cve.now/CVE-2026-62474.md): Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Lease Authoring). (CVSS 6.3, Oracle Lease and Finance Management)
- [CVE-2026-62473](https://cve.now/CVE-2026-62473.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). (CVSS 8.3, Oracle Installed Base)
- [CVE-2026-62472](https://cve.now/CVE-2026-62472.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). (CVSS 8.1, Oracle Installed Base)
- [CVE-2026-62470](https://cve.now/CVE-2026-62470.md): Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Manager Self-Service). (CVSS 6.5, Oracle Self-Service Human Resources)
- [CVE-2026-62469](https://cve.now/CVE-2026-62469.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center). (CVSS 7.1, Oracle Human Resources)
- [CVE-2026-62468](https://cve.now/CVE-2026-62468.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center). (CVSS 8.1, Oracle Human Resources)
- [CVE-2026-62466](https://cve.now/CVE-2026-62466.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). (CVSS 7.2, Oracle Human Resources)
- [CVE-2026-62465](https://cve.now/CVE-2026-62465.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.6, Oracle HRMS)
- [CVE-2026-62464](https://cve.now/CVE-2026-62464.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Payroll)
- [CVE-2026-62456](https://cve.now/CVE-2026-62456.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.2, Oracle HRMS)
- [CVE-2026-62453](https://cve.now/CVE-2026-62453.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.3, Oracle HRMS)
- [CVE-2026-62451](https://cve.now/CVE-2026-62451.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Work in Process)
- [CVE-2026-62447](https://cve.now/CVE-2026-62447.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). (CVSS 8.8, Oracle Trade Management)
- [CVE-2026-62445](https://cve.now/CVE-2026-62445.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 8.1, Oracle Order Management)
- [CVE-2026-62444](https://cve.now/CVE-2026-62444.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.1, Oracle Contracts Integration)
- [CVE-2026-62443](https://cve.now/CVE-2026-62443.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Contracts Integration)
- [CVE-2026-61338](https://cve.now/CVE-2026-61338.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Contracts Integration)
- [CVE-2026-61337](https://cve.now/CVE-2026-61337.md): Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Lease and Finance Management)
- [CVE-2026-61336](https://cve.now/CVE-2026-61336.md): Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Lease and Finance Management)
- [CVE-2026-61335](https://cve.now/CVE-2026-61335.md): Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Product Workbench)
- [CVE-2026-61334](https://cve.now/CVE-2026-61334.md): Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Price Protection)
- [CVE-2026-61333](https://cve.now/CVE-2026-61333.md): Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Product Workbench)
- [CVE-2026-61329](https://cve.now/CVE-2026-61329.md): Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Price Protection)
- [CVE-2026-61328](https://cve.now/CVE-2026-61328.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). (CVSS 6.6, Oracle Cost Management)
- [CVE-2026-61327](https://cve.now/CVE-2026-61327.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Bills of Material)
- [CVE-2026-61325](https://cve.now/CVE-2026-61325.md): Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Advanced Benefits)
- [CVE-2026-61324](https://cve.now/CVE-2026-61324.md): Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Advanced Benefits)
- [CVE-2026-61323](https://cve.now/CVE-2026-61323.md): Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Advanced Benefits)
- [CVE-2026-61322](https://cve.now/CVE-2026-61322.md): Vulnerability in the TeleSales product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle TeleSales)
- [CVE-2026-61320](https://cve.now/CVE-2026-61320.md): Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Payables)
- [CVE-2026-61316](https://cve.now/CVE-2026-61316.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). (CVSS 4.3, Oracle EDI Gateway)
- [CVE-2026-61315](https://cve.now/CVE-2026-61315.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). (CVSS 4.3, Oracle EDI Gateway)
- [CVE-2026-61314](https://cve.now/CVE-2026-61314.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). (CVSS 7.2, Oracle EDI Gateway)
- [CVE-2026-61312](https://cve.now/CVE-2026-61312.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.5, Oracle Product Hub)
- [CVE-2026-61311](https://cve.now/CVE-2026-61311.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Product Hub)
- [CVE-2026-61310](https://cve.now/CVE-2026-61310.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Product Hub)
- [CVE-2026-61309](https://cve.now/CVE-2026-61309.md): Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (component: Internal Operat (CVSS 7.5, Oracle In-Memory Cost Management for Discrete Industries)
- [CVE-2026-61304](https://cve.now/CVE-2026-61304.md): Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.3, Oracle Price Protection)
- [CVE-2026-61303](https://cve.now/CVE-2026-61303.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). (CVSS 1.9, Oracle EDI Gateway)
- [CVE-2026-61301](https://cve.now/CVE-2026-61301.md): Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Financials)
- [CVE-2026-61299](https://cve.now/CVE-2026-61299.md): Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Process Manufacturing Logistics)
- [CVE-2026-61297](https://cve.now/CVE-2026-61297.md): Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Customers Online)
- [CVE-2026-61294](https://cve.now/CVE-2026-61294.md): Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Calendar Synchronizations). (CVSS 6.3, Oracle Common Applications Calendar)
- [CVE-2026-61292](https://cve.now/CVE-2026-61292.md): Vulnerability in the Oracle U.S. (CVSS 4.3, Oracle U.S. Federal Financials)
- [CVE-2026-61289](https://cve.now/CVE-2026-61289.md): Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management Spec (CVSS 8.8, Oracle Process Manufacturing Product Development)
- [CVE-2026-61287](https://cve.now/CVE-2026-61287.md): Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Systems)
- [CVE-2026-61285](https://cve.now/CVE-2026-61285.md): Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Process Manufacturing Systems)
- [CVE-2026-61283](https://cve.now/CVE-2026-61283.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Web Services). (CVSS 6.3, Oracle Bills of Material)
- [CVE-2026-61282](https://cve.now/CVE-2026-61282.md): Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits). (CVSS 6.3, Oracle Advanced Benefits)
- [CVE-2026-61280](https://cve.now/CVE-2026-61280.md): Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Outlook Sync Win 32). (CVSS 6.3, Oracle Sales for Handhelds)
- [CVE-2026-61279](https://cve.now/CVE-2026-61279.md): Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Proposals). (CVSS 6.3, Oracle Proposals)
- [CVE-2026-61278](https://cve.now/CVE-2026-61278.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 6.3, Oracle Workflow)
- [CVE-2026-61277](https://cve.now/CVE-2026-61277.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). (CVSS 6.3, Oracle Marketing)
- [CVE-2026-61275](https://cve.now/CVE-2026-61275.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Role Based Security). (CVSS 6.3, Oracle Product Hub)
- [CVE-2026-61274](https://cve.now/CVE-2026-61274.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). (CVSS 6.3, Oracle Product Hub)
- [CVE-2026-61271](https://cve.now/CVE-2026-61271.md): Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). (CVSS 7.3, Oracle Document Management and Collaboration)
- [CVE-2026-61269](https://cve.now/CVE-2026-61269.md): Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). (CVSS 6.3, Oracle Product Workbench)
- [CVE-2026-61267](https://cve.now/CVE-2026-61267.md): Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Spreadsheet Loading). (CVSS 7.3, Oracle HCM Configuration Workbench)
- [CVE-2026-61266](https://cve.now/CVE-2026-61266.md): Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite (component: Copy Inventory Organization). (CVSS 6.3, Oracle Supply Chain Globalization)
- [CVE-2026-61264](https://cve.now/CVE-2026-61264.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: RDBMS and UI). (CVSS 5.4, Oracle Call Center Technology)
- [CVE-2026-61263](https://cve.now/CVE-2026-61263.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). (CVSS 5.4, Oracle Scripting)
- [CVE-2026-61262](https://cve.now/CVE-2026-61262.md): Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). (CVSS 6.5, Oracle Teleservice)
- [CVE-2026-61261](https://cve.now/CVE-2026-61261.md): Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: User Interface). (CVSS 5.4, Oracle Knowledge Management)
- [CVE-2026-61260](https://cve.now/CVE-2026-61260.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). (CVSS 5.4, Oracle HRMS)
- [CVE-2026-61257](https://cve.now/CVE-2026-61257.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Call Back). (CVSS 5.4, Oracle iSupport)
- [CVE-2026-61256](https://cve.now/CVE-2026-61256.md): Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Servers). (CVSS 6.3, Oracle Advanced Inbound Telephony)
- [CVE-2026-61255](https://cve.now/CVE-2026-61255.md): Vulnerability in the Oracle HRMS (New Zealand) product of Oracle E-Business Suite (component: New Zealand Payroll). (CVSS 5.4, Oracle HRMS)
- [CVE-2026-61254](https://cve.now/CVE-2026-61254.md): Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). (CVSS 5.4, Oracle HRMS)
- [CVE-2026-61253](https://cve.now/CVE-2026-61253.md): Vulnerability in the Oracle HRMS (Japanese) product of Oracle E-Business Suite (component: Oracle Payroll Japanese). (CVSS 5.4, Oracle HRMS)
- [CVE-2026-61252](https://cve.now/CVE-2026-61252.md): Vulnerability in the Oracle HRMS (Hong Kong) product of Oracle E-Business Suite (component: Hong Kong Payroll). (CVSS 5.4, Oracle HRMS)
- [CVE-2026-61251](https://cve.now/CVE-2026-61251.md): Vulnerability in the HRMS (Australia) product of Oracle E-Business Suite (component: Payroll). (CVSS 6.5, Oracle HRMS)
- [CVE-2026-61250](https://cve.now/CVE-2026-61250.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). (CVSS 6.5, Oracle Payroll)
- [CVE-2026-61249](https://cve.now/CVE-2026-61249.md): Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Import And Export). (CVSS 6.5, Oracle Learning Management)
- [CVE-2026-61247](https://cve.now/CVE-2026-61247.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 4.8, Oracle Workflow)
- [CVE-2026-61245](https://cve.now/CVE-2026-61245.md): Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). (CVSS 9.8, Oracle PeopleSoft Enterprise FIN Manufacturing Brazil)
- [CVE-2026-61244](https://cve.now/CVE-2026-61244.md): Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle PeopleSoft (component: Manufacturing). (CVSS 9.1, Oracle PeopleSoft Enterprise FIN Manufacturing Argentina)
- [CVE-2026-61243](https://cve.now/CVE-2026-61243.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing). (CVSS 8.8, Oracle PeopleSoft Enterprise FIN Common Objects Argentina)
- [CVE-2026-61242](https://cve.now/CVE-2026-61242.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Staffing). (CVSS 9.9, Oracle PeopleSoft Enterprise FIN Common Objects Argentina)
- [CVE-2026-61240](https://cve.now/CVE-2026-61240.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eSettlements). (CVSS 8.2, Oracle PeopleSoft Enterprise FIN Common Objects Argentina)
- [CVE-2026-61239](https://cve.now/CVE-2026-61239.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). (CVSS 9.9, Oracle PeopleSoft Enterprise FIN Common Objects Argentina)
- [CVE-2026-61238](https://cve.now/CVE-2026-61238.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). (CVSS 9.1, Oracle PeopleSoft Enterprise FIN Common Objects Argentina)
- [CVE-2026-61237](https://cve.now/CVE-2026-61237.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). (CVSS 9.9, Oracle PeopleSoft Enterprise FIN Common Objects Argentina)
- [CVE-2026-61236](https://cve.now/CVE-2026-61236.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Staffing). (CVSS 7.5, Oracle PeopleSoft Enterprise FIN Common Objects Brazil)
- [CVE-2026-61235](https://cve.now/CVE-2026-61235.md): Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switze (CVSS 9.1, Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland)
- [CVE-2026-61234](https://cve.now/CVE-2026-61234.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). (CVSS 7.4, Oracle PeopleSoft Enterprise FIN Common Objects Brazil)
- [CVE-2026-61233](https://cve.now/CVE-2026-61233.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration). (CVSS 9.8, Oracle PeopleSoft Enterprise FIN Common Objects Brazil)
- [CVE-2026-61232](https://cve.now/CVE-2026-61232.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). (CVSS 7.5, Oracle PeopleSoft Enterprise FIN Common Objects Brazil)
- [CVE-2026-61226](https://cve.now/CVE-2026-61226.md): Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: RTP Proxy). (CVSS 7.5, Oracle Communications Converged Application Server)
- [CVE-2026-61225](https://cve.now/CVE-2026-61225.md): Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). (CVSS 8.1, Oracle Communications Converged Application Server)
- [CVE-2026-61224](https://cve.now/CVE-2026-61224.md): Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). (CVSS 8.0, Oracle Communications Converged Application Server)
- [CVE-2026-61223](https://cve.now/CVE-2026-61223.md): Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Security). (CVSS 9.0, Oracle Communications Converged Application Server)
- [CVE-2026-61221](https://cve.now/CVE-2026-61221.md): Vulnerability in the Oracle Item Master product of Oracle E-Business Suite (component: iSet-up bugs). (CVSS 5.4, Oracle Item Master)
- [CVE-2026-61220](https://cve.now/CVE-2026-61220.md): Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Configuration). (CVSS 6.1, Oracle Banking Origination)
- [CVE-2026-61218](https://cve.now/CVE-2026-61218.md): Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engi (CVSS 8.1, Oracle E-Business Suite Secure Enterprise Search)
- [CVE-2026-61217](https://cve.now/CVE-2026-61217.md): Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: Oracle SSL API). (CVSS 6.4, Oracle Security Service)
- [CVE-2026-61216](https://cve.now/CVE-2026-61216.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). (CVSS 6.3, Oracle Payroll)
- [CVE-2026-61214](https://cve.now/CVE-2026-61214.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). (CVSS 2.2, Oracle HRMS)
- [CVE-2026-61211](https://cve.now/CVE-2026-61211.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 9.9, Oracle Database Server)
- [CVE-2026-61210](https://cve.now/CVE-2026-61210.md): Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). (CVSS 7.4, Oracle PeopleSoft Enterprise SCM Manufacturing)
- [CVE-2026-61209](https://cve.now/CVE-2026-61209.md): Vulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle PeopleSoft (component: Project Discovery). (CVSS 9.9, Oracle PeopleSoft In-Memory Project Discovery)
- [CVE-2026-61207](https://cve.now/CVE-2026-61207.md): Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status). (CVSS 9.3, Oracle PeopleSoft Enterprise SCM eProcurement)
- [CVE-2026-61205](https://cve.now/CVE-2026-61205.md): Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). (CVSS 8.2, Oracle PeopleSoft Enterprise SCM Purchasing)
- [CVE-2026-61204](https://cve.now/CVE-2026-61204.md): Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft (component: Primavera Integration). (CVSS 9.0, Oracle PeopleSoft Enterprise FIN Program Management)
- [CVE-2026-61203](https://cve.now/CVE-2026-61203.md): Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). (CVSS 9.4, Oracle PeopleSoft Enterprise FIN Expenses)
- [CVE-2026-61202](https://cve.now/CVE-2026-61202.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 7.5, Oracle Solaris)
- [CVE-2026-61201](https://cve.now/CVE-2026-61201.md): Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects). (CVSS 9.0, Oracle PeopleSoft Enterprise CRM Common Objects)
- [CVE-2026-61200](https://cve.now/CVE-2026-61200.md): Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Labor Distribution)
- [CVE-2026-61197](https://cve.now/CVE-2026-61197.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.1, Oracle Identity Manager)
- [CVE-2026-61196](https://cve.now/CVE-2026-61196.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.8, Oracle Identity Manager)
- [CVE-2026-61195](https://cve.now/CVE-2026-61195.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). (CVSS 6.5, Oracle Agile Engineering Data Management)
- [CVE-2026-61194](https://cve.now/CVE-2026-61194.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Core). (CVSS 6.5, Oracle Agile Engineering Data Management)
- [CVE-2026-61192](https://cve.now/CVE-2026-61192.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 5.3, Oracle Agile Engineering Data Management)
- [CVE-2026-61191](https://cve.now/CVE-2026-61191.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Document Management). (CVSS 4.4, Oracle Agile Engineering Data Management)
- [CVE-2026-61190](https://cve.now/CVE-2026-61190.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 6.4, Oracle Agile Engineering Data Management)
- [CVE-2026-61189](https://cve.now/CVE-2026-61189.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 6.5, Oracle Agile Engineering Data Management)
- [CVE-2026-61188](https://cve.now/CVE-2026-61188.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). (CVSS 7.5, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-61187](https://cve.now/CVE-2026-61187.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 2.8, Oracle Agile Engineering Data Management)
- [CVE-2026-61186](https://cve.now/CVE-2026-61186.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 9.4, Oracle Agile Engineering Data Management)
- [CVE-2026-61185](https://cve.now/CVE-2026-61185.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). (CVSS 7.4, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-61184](https://cve.now/CVE-2026-61184.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 9.1, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-61183](https://cve.now/CVE-2026-61183.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Reporting). (CVSS 9.8, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-61182](https://cve.now/CVE-2026-61182.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Data Import). (CVSS 6.7, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-61181](https://cve.now/CVE-2026-61181.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 7.6, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-61180](https://cve.now/CVE-2026-61180.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.8, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-61179](https://cve.now/CVE-2026-61179.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.8, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-61178](https://cve.now/CVE-2026-61178.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Installation). (CVSS 9.8, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2026-61176](https://cve.now/CVE-2026-61176.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 6.7, Oracle Product Lifecycle Analytics)
- [CVE-2026-61175](https://cve.now/CVE-2026-61175.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 9.3, Oracle Product Lifecycle Analytics)
- [CVE-2026-61174](https://cve.now/CVE-2026-61174.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 9.0, Oracle Product Lifecycle Analytics)
- [CVE-2026-61173](https://cve.now/CVE-2026-61173.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 7.4, Oracle Agile PLM)
- [CVE-2026-61172](https://cve.now/CVE-2026-61172.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 7.5, Oracle Agile PLM)
- [CVE-2026-61171](https://cve.now/CVE-2026-61171.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 9.1, Oracle Agile PLM)
- [CVE-2026-61170](https://cve.now/CVE-2026-61170.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 8.1, Oracle Agile PLM)
- [CVE-2026-61169](https://cve.now/CVE-2026-61169.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 6.5, Oracle Agile PLM)
- [CVE-2026-61168](https://cve.now/CVE-2026-61168.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-61167](https://cve.now/CVE-2026-61167.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 9.8, Oracle Agile PLM)
- [CVE-2026-61166](https://cve.now/CVE-2026-61166.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-61165](https://cve.now/CVE-2026-61165.md): Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). (CVSS 7.1, Oracle Commerce Guided Search Platform Services)
- [CVE-2026-61164](https://cve.now/CVE-2026-61164.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 7.4, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61163](https://cve.now/CVE-2026-61163.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). (CVSS 8.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61162](https://cve.now/CVE-2026-61162.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 7.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61161](https://cve.now/CVE-2026-61161.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 9.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61160](https://cve.now/CVE-2026-61160.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 8.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61159](https://cve.now/CVE-2026-61159.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61158](https://cve.now/CVE-2026-61158.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61157](https://cve.now/CVE-2026-61157.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61156](https://cve.now/CVE-2026-61156.md): Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). (CVSS 9.1, Oracle Commerce Guided Search Platform Services)
- [CVE-2026-61155](https://cve.now/CVE-2026-61155.md): Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). (CVSS 9.1, Oracle Commerce Guided Search Platform Services)
- [CVE-2026-61154](https://cve.now/CVE-2026-61154.md): Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Commerce (component: Forge). (CVSS 9.8, Oracle Commerce Guided Search Platform Services)
- [CVE-2026-61153](https://cve.now/CVE-2026-61153.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61152](https://cve.now/CVE-2026-61152.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 5.4, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61151](https://cve.now/CVE-2026-61151.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 7.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61150](https://cve.now/CVE-2026-61150.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 8.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61149](https://cve.now/CVE-2026-61149.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 8.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61148](https://cve.now/CVE-2026-61148.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 8.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61147](https://cve.now/CVE-2026-61147.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 6.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61146](https://cve.now/CVE-2026-61146.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 9.9, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61145](https://cve.now/CVE-2026-61145.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 9.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-61144](https://cve.now/CVE-2026-61144.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-61143](https://cve.now/CVE-2026-61143.md): Vulnerability in the Oracle Communications Convergent Charging Controller product of Oracle Communications (component: Prov IF). (CVSS 6.4, Oracle Communications Convergent Charging Controller)
- [CVE-2026-61142](https://cve.now/CVE-2026-61142.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Payroll)
- [CVE-2026-61141](https://cve.now/CVE-2026-61141.md): Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act). (CVSS 7.5, Oracle Advanced Benefits)
- [CVE-2026-61140](https://cve.now/CVE-2026-61140.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.8, Oracle WebCenter Sites)
- [CVE-2026-61138](https://cve.now/CVE-2026-61138.md): Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Complex Maintenance, Repair and Overhaul)
- [CVE-2026-61137](https://cve.now/CVE-2026-61137.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 8.1, Oracle Commerce Platform)
- [CVE-2026-61136](https://cve.now/CVE-2026-61136.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 7.3, Oracle Commerce Platform)
- [CVE-2026-61135](https://cve.now/CVE-2026-61135.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 7.4, Oracle Commerce Platform)
- [CVE-2026-61134](https://cve.now/CVE-2026-61134.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 6.8, Oracle Commerce Platform)
- [CVE-2026-61133](https://cve.now/CVE-2026-61133.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 7.5, Oracle Commerce Platform)
- [CVE-2026-61132](https://cve.now/CVE-2026-61132.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 7.6, Oracle Commerce Platform)
- [CVE-2026-61131](https://cve.now/CVE-2026-61131.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 9.8, Oracle Commerce Platform)
- [CVE-2026-61130](https://cve.now/CVE-2026-61130.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 9.1, Oracle Commerce Platform)
- [CVE-2026-61129](https://cve.now/CVE-2026-61129.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: ATG Portals). (CVSS 9.8, Oracle Commerce Platform)
- [CVE-2026-61128](https://cve.now/CVE-2026-61128.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-61127](https://cve.now/CVE-2026-61127.md): Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communications (component: Solution Designer). (CVSS 8.8, Oracle Communications Service Catalog and Design)
- [CVE-2026-61126](https://cve.now/CVE-2026-61126.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). (CVSS 7.8, Oracle Communications Billing and Revenue Management)
- [CVE-2026-61125](https://cve.now/CVE-2026-61125.md): Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). (CVSS 7.7, Oracle Configure to Order)
- [CVE-2026-61123](https://cve.now/CVE-2026-61123.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 4.2, Oracle HRMS)
- [CVE-2026-61122](https://cve.now/CVE-2026-61122.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). (CVSS 8.1, Oracle HRMS)
- [CVE-2026-61121](https://cve.now/CVE-2026-61121.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). (CVSS 8.8, Oracle HRMS)
- [CVE-2026-61120](https://cve.now/CVE-2026-61120.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.0, Oracle HRMS)
- [CVE-2026-61119](https://cve.now/CVE-2026-61119.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). (CVSS 7.1, Oracle HRMS)
- [CVE-2026-61117](https://cve.now/CVE-2026-61117.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.3, Oracle HRMS)
- [CVE-2026-61116](https://cve.now/CVE-2026-61116.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 7.5, Oracle Application Object Library)
- [CVE-2026-61115](https://cve.now/CVE-2026-61115.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 7.2, Oracle Order Management)
- [CVE-2026-61114](https://cve.now/CVE-2026-61114.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). (CVSS 7.5, Oracle Application Object Library)
- [CVE-2026-61113](https://cve.now/CVE-2026-61113.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 7.4, Oracle Application Object Library)
- [CVE-2026-61112](https://cve.now/CVE-2026-61112.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 6.5, Oracle Order Management)
- [CVE-2026-61111](https://cve.now/CVE-2026-61111.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 6.5, Oracle Application Object Library)
- [CVE-2026-61110](https://cve.now/CVE-2026-61110.md): Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). (CVSS 8.8, Oracle Applications DBA)
- [CVE-2026-61109](https://cve.now/CVE-2026-61109.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-61108](https://cve.now/CVE-2026-61108.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-61107](https://cve.now/CVE-2026-61107.md): Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Applications DBA)
- [CVE-2026-61106](https://cve.now/CVE-2026-61106.md): Vulnerability in Oracle GoldenGate (component: Config Service Executable). (CVSS 8.1, Oracle GoldenGate)
- [CVE-2026-61105](https://cve.now/CVE-2026-61105.md): Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 8.1, Oracle Banking Trade Finance)
- [CVE-2026-61104](https://cve.now/CVE-2026-61104.md): Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). (CVSS 3.7, Oracle PeopleSoft Enterprise CS Student Records)
- [CVE-2026-61103](https://cve.now/CVE-2026-61103.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). (CVSS 5.9, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-61102](https://cve.now/CVE-2026-61102.md): Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 8.1, Oracle Banking Trade Finance)
- [CVE-2026-61101](https://cve.now/CVE-2026-61101.md): Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.2, Oracle MES for Process Manufacturing)
- [CVE-2026-61100](https://cve.now/CVE-2026-61100.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-61099](https://cve.now/CVE-2026-61099.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 8.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-61098](https://cve.now/CVE-2026-61098.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 8.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-61097](https://cve.now/CVE-2026-61097.md): Vulnerability in the Oracle Banking Trade Finance Process Management product of Oracle Financial Services Applications (component: Common). (CVSS 9.6, Oracle Banking Trade Finance Process Management)
- [CVE-2026-61096](https://cve.now/CVE-2026-61096.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). (CVSS 2.9, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-61095](https://cve.now/CVE-2026-61095.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). (CVSS 7.1, Oracle Communications Unified Inventory Management)
- [CVE-2026-61094](https://cve.now/CVE-2026-61094.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 7.2, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-61093](https://cve.now/CVE-2026-61093.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-61092](https://cve.now/CVE-2026-61092.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 8.1, Oracle WebCenter Enterprise Capture)
- [CVE-2026-61091](https://cve.now/CVE-2026-61091.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). (CVSS 7.8, Oracle Communications Billing and Revenue Management)
- [CVE-2026-61090](https://cve.now/CVE-2026-61090.md): Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscellaneous). (CVSS 7.8, Oracle Project Foundation)
- [CVE-2026-61089](https://cve.now/CVE-2026-61089.md): Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft (component: Security). (CVSS 8.2, Oracle PeopleSoft Enterprise SCM Inventory)
- [CVE-2026-61088](https://cve.now/CVE-2026-61088.md): Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). (CVSS 7.5, Oracle PeopleSoft Enterprise SCM Manufacturing)
- [CVE-2026-61087](https://cve.now/CVE-2026-61087.md): Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Security). (CVSS 7.5, Oracle PeopleSoft Enterprise FIN Payables)
- [CVE-2026-61086](https://cve.now/CVE-2026-61086.md): Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). (CVSS 7.5, Oracle PeopleSoft Enterprise SCM Order Management)
- [CVE-2026-61085](https://cve.now/CVE-2026-61085.md): Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft (component: Security). (CVSS 7.5, Oracle PeopleSoft Enterprise SCM Inventory)
- [CVE-2026-61084](https://cve.now/CVE-2026-61084.md): Vulnerability in Oracle GoldenGate (component: Libraries). (CVSS 4.4, Oracle GoldenGate)
- [CVE-2026-61083](https://cve.now/CVE-2026-61083.md): Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals). (CVSS 5.4, Oracle Performance Management)
- [CVE-2026-61082](https://cve.now/CVE-2026-61082.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 6.5, Oracle MySQL Connectors)
- [CVE-2026-61081](https://cve.now/CVE-2026-61081.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). (CVSS 2.7, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-61080](https://cve.now/CVE-2026-61080.md): Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). (CVSS 5.4, Oracle Public Sector Human Resources)
- [CVE-2026-61079](https://cve.now/CVE-2026-61079.md): Vulnerability in Oracle GoldenGate (component: Libraries). (CVSS 5.8, Oracle GoldenGate)
- [CVE-2026-61078](https://cve.now/CVE-2026-61078.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects (CVSS 8.7, Oracle PeopleSoft Enterprise CC Common Application Objects)
- [CVE-2026-61077](https://cve.now/CVE-2026-61077.md): Vulnerability in the PeopleSoft Enterprise SCM Mobile Inventory Management product of Oracle PeopleSoft (component: Security). (CVSS 7.5, Oracle PeopleSoft Enterprise SCM Mobile Inventory Management)
- [CVE-2026-61076](https://cve.now/CVE-2026-61076.md): Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). (CVSS 9.9, Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager)
- [CVE-2026-61075](https://cve.now/CVE-2026-61075.md): Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Self-Service Human Resources)
- [CVE-2026-61074](https://cve.now/CVE-2026-61074.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). (CVSS 8.1, Oracle PeopleSoft Enterprise FIN Common Objects Brazil)
- [CVE-2026-61073](https://cve.now/CVE-2026-61073.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Purchasing). (CVSS 7.5, Oracle PeopleSoft Enterprise FIN Common Objects Brazil)
- [CVE-2026-61072](https://cve.now/CVE-2026-61072.md): Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft (component: Staffing). (CVSS 9.9, Oracle PeopleSoft Enterprise FIN Staffing Front Office Braz…)
- [CVE-2026-61071](https://cve.now/CVE-2026-61071.md): Vulnerability in the PeopleSoft Enterprise FIN Engineering Argentina product of Oracle PeopleSoft (component: Engineering). (CVSS 3.3, Oracle PeopleSoft Enterprise FIN Engineering Argentina)
- [CVE-2026-61070](https://cve.now/CVE-2026-61070.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Cash Management). (CVSS 5.3, Oracle PeopleSoft Enterprise FIN Common Objects Argentina)
- [CVE-2026-61069](https://cve.now/CVE-2026-61069.md): Vulnerability in the PeopleSoft Enterprise FIN General Ledger Argentina product of Oracle PeopleSoft (component: General Ledger). (CVSS 5.9, Oracle PeopleSoft Enterprise FIN General Ledger Argentina)
- [CVE-2026-61068](https://cve.now/CVE-2026-61068.md): Vulnerability in the PeopleSoft Enterprise FIN Billing Argentina product of Oracle PeopleSoft (component: Billing). (CVSS 7.2, Oracle PeopleSoft Enterprise FIN Billing Argentina)
- [CVE-2026-61067](https://cve.now/CVE-2026-61067.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.0, Oracle Access Manager)
- [CVE-2026-61065](https://cve.now/CVE-2026-61065.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 9.8, Oracle Access Manager)
- [CVE-2026-61064](https://cve.now/CVE-2026-61064.md): Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Install / Upgrade Issues). (CVSS 5.4, Oracle iRecruitment)
- [CVE-2026-61063](https://cve.now/CVE-2026-61063.md): Vulnerability in the PeopleSoft Enterprise SCM Supplier Contract Management product of Oracle PeopleSoft (component: Security). (CVSS 8.8, Oracle PeopleSoft Enterprise SCM Supplier Contract Manageme…)
- [CVE-2026-61062](https://cve.now/CVE-2026-61062.md): Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). (CVSS 8.8, Oracle PeopleSoft Enterprise FIN Cash Management)
- [CVE-2026-61061](https://cve.now/CVE-2026-61061.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). (CVSS 7.0, Oracle JDeveloper)
- [CVE-2026-61060](https://cve.now/CVE-2026-61060.md): Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engi (CVSS 5.4, Oracle E-Business Suite Secure Enterprise Search)
- [CVE-2026-61059](https://cve.now/CVE-2026-61059.md): Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). (CVSS 9.1, Oracle PeopleSoft Enterprise SCM Order Management)
- [CVE-2026-61057](https://cve.now/CVE-2026-61057.md): Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). (CVSS 4.8, Oracle PeopleSoft Enterprise FIN eSettlements)
- [CVE-2026-61056](https://cve.now/CVE-2026-61056.md): Vulnerability in the PeopleSoft Enterprise FIN Grants product of Oracle PeopleSoft (component: Grants). (CVSS 4.8, Oracle PeopleSoft Enterprise FIN Grants)
- [CVE-2026-61055](https://cve.now/CVE-2026-61055.md): Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). (CVSS 7.8, Oracle PeopleSoft Enterprise SCM Order Management)
- [CVE-2026-61053](https://cve.now/CVE-2026-61053.md): Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and S (CVSS 7.8, Oracle Communications BRM - Elastic Charging Engine)
- [CVE-2026-61052](https://cve.now/CVE-2026-61052.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). (CVSS 5.5, Oracle Solaris)
- [CVE-2026-61051](https://cve.now/CVE-2026-61051.md): Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). (CVSS 6.3, Oracle Concurrent Processing)
- [CVE-2026-61050](https://cve.now/CVE-2026-61050.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: User Interface). (CVSS 5.3, Oracle Production Scheduling)
- [CVE-2026-61049](https://cve.now/CVE-2026-61049.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Production Scheduling)
- [CVE-2026-61048](https://cve.now/CVE-2026-61048.md): Vulnerability in the Oracle Inventory Optimization product of Oracle E-Business Suite (component: User Interface). (CVSS 3.1, Oracle Inventory Optimization)
- [CVE-2026-61047](https://cve.now/CVE-2026-61047.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 1.9, Oracle Production Scheduling)
- [CVE-2026-61046](https://cve.now/CVE-2026-61046.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.6, Oracle Production Scheduling)
- [CVE-2026-61044](https://cve.now/CVE-2026-61044.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 4.7, Oracle Production Scheduling)
- [CVE-2026-61043](https://cve.now/CVE-2026-61043.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.7, Oracle Production Scheduling)
- [CVE-2026-61041](https://cve.now/CVE-2026-61041.md): Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security). (CVSS 9.9, Oracle Demantra Demand Management)
- [CVE-2026-61039](https://cve.now/CVE-2026-61039.md): Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle E-Business Suite (component: Core). (CVSS 7.2, Oracle Advanced Supply Chain Planning)
- [CVE-2026-61037](https://cve.now/CVE-2026-61037.md): Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Loans)
- [CVE-2026-61036](https://cve.now/CVE-2026-61036.md): Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Norway Payroll). (CVSS 3.8, Oracle HRMS)
- [CVE-2026-61035](https://cve.now/CVE-2026-61035.md): Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Financials for the Americas)
- [CVE-2026-61031](https://cve.now/CVE-2026-61031.md): Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Financials Common Country)
- [CVE-2026-61030](https://cve.now/CVE-2026-61030.md): Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Product Development)
- [CVE-2026-61028](https://cve.now/CVE-2026-61028.md): Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 1.9, Oracle Inventory Management)
- [CVE-2026-61027](https://cve.now/CVE-2026-61027.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Inventory Costing). (CVSS 7.2, Oracle Cost Management)
- [CVE-2026-61026](https://cve.now/CVE-2026-61026.md): Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle iRecruitment)
- [CVE-2026-61025](https://cve.now/CVE-2026-61025.md): Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle iRecruitment)
- [CVE-2026-61024](https://cve.now/CVE-2026-61024.md): Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle iRecruitment)
- [CVE-2026-61023](https://cve.now/CVE-2026-61023.md): Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.4, Oracle Inventory Management)
- [CVE-2026-61020](https://cve.now/CVE-2026-61020.md): Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Customers Online)
- [CVE-2026-61019](https://cve.now/CVE-2026-61019.md): Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Customers Online)
- [CVE-2026-61015](https://cve.now/CVE-2026-61015.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.7, Oracle Time and Labor)
- [CVE-2026-61014](https://cve.now/CVE-2026-61014.md): Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Inventory Management)
- [CVE-2026-61013](https://cve.now/CVE-2026-61013.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.6, Oracle Time and Labor)
- [CVE-2026-61012](https://cve.now/CVE-2026-61012.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Time and Labor)
- [CVE-2026-61010](https://cve.now/CVE-2026-61010.md): Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Process Manufacturing Systems)
- [CVE-2026-61009](https://cve.now/CVE-2026-61009.md): Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.0, Oracle Process Manufacturing Logistics)
- [CVE-2026-61006](https://cve.now/CVE-2026-61006.md): Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Process Manufacturing Logistics)
- [CVE-2026-61005](https://cve.now/CVE-2026-61005.md): Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Logistics)
- [CVE-2026-61004](https://cve.now/CVE-2026-61004.md): Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Landed Cost Management)
- [CVE-2026-61000](https://cve.now/CVE-2026-61000.md): Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Systems)
- [CVE-2026-60999](https://cve.now/CVE-2026-60999.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). (CVSS 9.8, Oracle Data Integrator)
- [CVE-2026-60997](https://cve.now/CVE-2026-60997.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Non-Media Integration issues). (CVSS 8.1, Oracle Universal Work Queue)
- [CVE-2026-60989](https://cve.now/CVE-2026-60989.md): Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Advanced Collections)
- [CVE-2026-60988](https://cve.now/CVE-2026-60988.md): Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Project Portfolio Analysis)
- [CVE-2026-60987](https://cve.now/CVE-2026-60987.md): Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Project Portfolio Analysis)
- [CVE-2026-60986](https://cve.now/CVE-2026-60986.md): Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Project Portfolio Analysis)
- [CVE-2026-60985](https://cve.now/CVE-2026-60985.md): Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Project Portfolio Analysis)
- [CVE-2026-60984](https://cve.now/CVE-2026-60984.md): Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Project Portfolio Analysis)
- [CVE-2026-60982](https://cve.now/CVE-2026-60982.md): Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle US Federal Human Resources)
- [CVE-2026-60979](https://cve.now/CVE-2026-60979.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Scripting)
- [CVE-2026-60978](https://cve.now/CVE-2026-60978.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Scripting)
- [CVE-2026-60974](https://cve.now/CVE-2026-60974.md): Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle E-Business Tax)
- [CVE-2026-60973](https://cve.now/CVE-2026-60973.md): Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.8, Oracle E-Business Tax)
- [CVE-2026-60972](https://cve.now/CVE-2026-60972.md): Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle E-Business Tax)
- [CVE-2026-60966](https://cve.now/CVE-2026-60966.md): Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). (CVSS 8.1, Oracle Public Sector Human Resources)
- [CVE-2026-60965](https://cve.now/CVE-2026-60965.md): Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). (CVSS 8.1, Oracle HRMS)
- [CVE-2026-60963](https://cve.now/CVE-2026-60963.md): Vulnerability in the Oracle Treasury product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Treasury)
- [CVE-2026-60962](https://cve.now/CVE-2026-60962.md): Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Flow Manufacturing)
- [CVE-2026-60960](https://cve.now/CVE-2026-60960.md): Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle SDP Number Portability)
- [CVE-2026-60959](https://cve.now/CVE-2026-60959.md): Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle SDP Number Portability)
- [CVE-2026-60957](https://cve.now/CVE-2026-60957.md): Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Transportation Execution)
- [CVE-2026-60953](https://cve.now/CVE-2026-60953.md): Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Telecommunications Billing Integrator)
- [CVE-2026-60952](https://cve.now/CVE-2026-60952.md): Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Transportation Execution)
- [CVE-2026-60951](https://cve.now/CVE-2026-60951.md): Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Time and Labor)
- [CVE-2026-60950](https://cve.now/CVE-2026-60950.md): Vulnerability in the Oracle HRMS (Ireland) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 2.2, Oracle HRMS)
- [CVE-2026-60948](https://cve.now/CVE-2026-60948.md): Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Learning Management)
- [CVE-2026-60945](https://cve.now/CVE-2026-60945.md): Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.3, Oracle Learning Management)
- [CVE-2026-60943](https://cve.now/CVE-2026-60943.md): Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). (CVSS 7.5, Oracle Service Fulfillment Manager)
- [CVE-2026-60942](https://cve.now/CVE-2026-60942.md): Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). (CVSS 8.1, Oracle Service Fulfillment Manager)
- [CVE-2026-60941](https://cve.now/CVE-2026-60941.md): Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). (CVSS 8.7, Oracle Service Fulfillment Manager)
- [CVE-2026-60940](https://cve.now/CVE-2026-60940.md): Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.7, Oracle Service Contracts)
- [CVE-2026-60939](https://cve.now/CVE-2026-60939.md): Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.1, Oracle Project Contracts)
- [CVE-2026-60938](https://cve.now/CVE-2026-60938.md): Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 4.1, Oracle Labor Distribution)
- [CVE-2026-60937](https://cve.now/CVE-2026-60937.md): Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.1, Oracle Labor Distribution)
- [CVE-2026-60936](https://cve.now/CVE-2026-60936.md): Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.1, Oracle Labor Distribution)
- [CVE-2026-60932](https://cve.now/CVE-2026-60932.md): Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Labor Distribution)
- [CVE-2026-60931](https://cve.now/CVE-2026-60931.md): Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Public Sector Financials)
- [CVE-2026-60930](https://cve.now/CVE-2026-60930.md): Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.1, Oracle Public Sector Financials)
- [CVE-2026-60929](https://cve.now/CVE-2026-60929.md): Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.1, Oracle Public Sector Financials)
- [CVE-2026-60927](https://cve.now/CVE-2026-60927.md): Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Public Sector Financials)
- [CVE-2026-60926](https://cve.now/CVE-2026-60926.md): Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Public Sector Payroll)
- [CVE-2026-60925](https://cve.now/CVE-2026-60925.md): Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Public Sector Payroll)
- [CVE-2026-60924](https://cve.now/CVE-2026-60924.md): Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Public Sector Payroll)
- [CVE-2026-60923](https://cve.now/CVE-2026-60923.md): Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Capacity)
- [CVE-2026-60922](https://cve.now/CVE-2026-60922.md): Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.1, Oracle iSupplier Portal)
- [CVE-2026-60920](https://cve.now/CVE-2026-60920.md): Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Customer Care)
- [CVE-2026-60919](https://cve.now/CVE-2026-60919.md): Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.7, Oracle iSupplier Portal)
- [CVE-2026-60918](https://cve.now/CVE-2026-60918.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Shipping Execution)
- [CVE-2026-60917](https://cve.now/CVE-2026-60917.md): Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Core Receiving). (CVSS 8.1, Oracle Inventory Management)
- [CVE-2026-60913](https://cve.now/CVE-2026-60913.md): Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). (CVSS 1.9, Oracle Property Manager)
- [CVE-2026-60912](https://cve.now/CVE-2026-60912.md): Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Property Manager)
- [CVE-2026-60911](https://cve.now/CVE-2026-60911.md): Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Property Manager)
- [CVE-2026-60910](https://cve.now/CVE-2026-60910.md): Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Property Manager)
- [CVE-2026-60908](https://cve.now/CVE-2026-60908.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). (CVSS 7.1, Oracle Installed Base)
- [CVE-2026-60907](https://cve.now/CVE-2026-60907.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). (CVSS 5.0, Oracle Installed Base)
- [CVE-2026-60904](https://cve.now/CVE-2026-60904.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). (CVSS 8.1, Oracle Installed Base)
- [CVE-2026-60901](https://cve.now/CVE-2026-60901.md): Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Project Intelligence)
- [CVE-2026-60900](https://cve.now/CVE-2026-60900.md): Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Rapid Implementation). (CVSS 7.2, Oracle HCM Configuration Workbench)
- [CVE-2026-60899](https://cve.now/CVE-2026-60899.md): Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite (component: Rapid Implementation). (CVSS 6.5, Oracle HCM Configuration Workbench)
- [CVE-2026-60898](https://cve.now/CVE-2026-60898.md): Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Warehouse Management)
- [CVE-2026-60897](https://cve.now/CVE-2026-60897.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Payroll)
- [CVE-2026-60896](https://cve.now/CVE-2026-60896.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.6, Oracle Work in Process)
- [CVE-2026-60894](https://cve.now/CVE-2026-60894.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Payroll)
- [CVE-2026-60893](https://cve.now/CVE-2026-60893.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Payroll)
- [CVE-2026-60892](https://cve.now/CVE-2026-60892.md): Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Norway Payroll). (CVSS 6.6, Oracle HRMS)
- [CVE-2026-60891](https://cve.now/CVE-2026-60891.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 1.9, Oracle Work in Process)
- [CVE-2026-60890](https://cve.now/CVE-2026-60890.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Payroll)
- [CVE-2026-60888](https://cve.now/CVE-2026-60888.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.3, Oracle Work in Process)
- [CVE-2026-60886](https://cve.now/CVE-2026-60886.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Work in Process)
- [CVE-2026-60880](https://cve.now/CVE-2026-60880.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 9.8, Oracle Work in Process)
- [CVE-2026-60877](https://cve.now/CVE-2026-60877.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). (CVSS 8.1, Oracle Trade Management)
- [CVE-2026-60875](https://cve.now/CVE-2026-60875.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). (CVSS 8.1, Oracle Trade Management)
- [CVE-2026-60872](https://cve.now/CVE-2026-60872.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 8.8, Oracle Order Management)
- [CVE-2026-60871](https://cve.now/CVE-2026-60871.md): Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Risk Management)
- [CVE-2026-60870](https://cve.now/CVE-2026-60870.md): Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation). (CVSS 7.1, Oracle Advanced Pricing)
- [CVE-2026-60868](https://cve.now/CVE-2026-60868.md): Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation). (CVSS 7.1, Oracle Advanced Pricing)
- [CVE-2026-60867](https://cve.now/CVE-2026-60867.md): Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation). (CVSS 8.1, Oracle Advanced Pricing)
- [CVE-2026-60864](https://cve.now/CVE-2026-60864.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 6.4, Oracle Order Management)
- [CVE-2026-60863](https://cve.now/CVE-2026-60863.md): Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Pricing Installation). (CVSS 8.8, Oracle Advanced Pricing)
- [CVE-2026-60862](https://cve.now/CVE-2026-60862.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 6.8, Oracle Order Management)
- [CVE-2026-60859](https://cve.now/CVE-2026-60859.md): Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Quoting)
- [CVE-2026-60857](https://cve.now/CVE-2026-60857.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Contracts Integration)
- [CVE-2026-60855](https://cve.now/CVE-2026-60855.md): Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Quality)
- [CVE-2026-60854](https://cve.now/CVE-2026-60854.md): Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.2, Oracle Quality)
- [CVE-2026-60852](https://cve.now/CVE-2026-60852.md): Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Lease and Finance Management)
- [CVE-2026-60848](https://cve.now/CVE-2026-60848.md): Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Project Contracts)
- [CVE-2026-60847](https://cve.now/CVE-2026-60847.md): Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.4, Oracle Order Entry)
- [CVE-2026-60846](https://cve.now/CVE-2026-60846.md): Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). (CVSS 6.7, Oracle Mobile Application Server)
- [CVE-2026-60845](https://cve.now/CVE-2026-60845.md): Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA General Bugs). (CVSS 7.2, Oracle Mobile Application Server)
- [CVE-2026-60844](https://cve.now/CVE-2026-60844.md): Vulnerability in the Oracle Customer Support product of Oracle E-Business Suite (component: Update Service Request). (CVSS 8.1, Oracle Customer Support)
- [CVE-2026-60843](https://cve.now/CVE-2026-60843.md): Vulnerability in the Oracle Citizen Interaction Center product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Citizen Interaction Center)
- [CVE-2026-60842](https://cve.now/CVE-2026-60842.md): Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Search). (CVSS 6.1, Oracle Knowledge Management)
- [CVE-2026-60840](https://cve.now/CVE-2026-60840.md): Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Demand Signal Repository)
- [CVE-2026-60838](https://cve.now/CVE-2026-60838.md): Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Price Protection)
- [CVE-2026-60837](https://cve.now/CVE-2026-60837.md): Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.4, Oracle Price Protection)
- [CVE-2026-60836](https://cve.now/CVE-2026-60836.md): Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle HCM Common Architecture)
- [CVE-2026-60835](https://cve.now/CVE-2026-60835.md): Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Price Protection)
- [CVE-2026-60834](https://cve.now/CVE-2026-60834.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 7.1, Oracle Solaris)
- [CVE-2026-60833](https://cve.now/CVE-2026-60833.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 7.0, Oracle Solaris)
- [CVE-2026-60832](https://cve.now/CVE-2026-60832.md): Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). (CVSS 4.1, Oracle Interaction Blending)
- [CVE-2026-60829](https://cve.now/CVE-2026-60829.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Advanced Outbound Telephony)
- [CVE-2026-60828](https://cve.now/CVE-2026-60828.md): Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Interaction Blending)
- [CVE-2026-60827](https://cve.now/CVE-2026-60827.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle iSupport)
- [CVE-2026-60826](https://cve.now/CVE-2026-60826.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.6, Oracle iSupport)
- [CVE-2026-60825](https://cve.now/CVE-2026-60825.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.6, Oracle iSupport)
- [CVE-2026-60824](https://cve.now/CVE-2026-60824.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle iSupport)
- [CVE-2026-60823](https://cve.now/CVE-2026-60823.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle iSupport)
- [CVE-2026-60817](https://cve.now/CVE-2026-60817.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 8.1, Oracle iStore)
- [CVE-2026-60816](https://cve.now/CVE-2026-60816.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 5.3, Oracle iStore)
- [CVE-2026-60815](https://cve.now/CVE-2026-60815.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 6.1, Oracle iStore)
- [CVE-2026-60813](https://cve.now/CVE-2026-60813.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 7.2, Oracle iStore)
- [CVE-2026-60812](https://cve.now/CVE-2026-60812.md): Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). (CVSS 6.5, Oracle Supply Chain Trading Connector)
- [CVE-2026-60811](https://cve.now/CVE-2026-60811.md): Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). (CVSS 6.3, Oracle Supply Chain Trading Connector)
- [CVE-2026-60810](https://cve.now/CVE-2026-60810.md): Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). (CVSS 8.2, Oracle Supply Chain Trading Connector)
- [CVE-2026-60807](https://cve.now/CVE-2026-60807.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.0, Oracle Bills of Material)
- [CVE-2026-60806](https://cve.now/CVE-2026-60806.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Costing Transaction Errors). (CVSS 7.5, Oracle Cost Management)
- [CVE-2026-60805](https://cve.now/CVE-2026-60805.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). (CVSS 6.2, Oracle Cost Management)
- [CVE-2026-60804](https://cve.now/CVE-2026-60804.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). (CVSS 2.0, Oracle E-Business Intelligence)
- [CVE-2026-60802](https://cve.now/CVE-2026-60802.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.1, Oracle E-Business Intelligence)
- [CVE-2026-60801](https://cve.now/CVE-2026-60801.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.9, Oracle E-Business Intelligence)
- [CVE-2026-60800](https://cve.now/CVE-2026-60800.md): Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). (CVSS 7.1, Oracle Compensation Workbench)
- [CVE-2026-60799](https://cve.now/CVE-2026-60799.md): Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). (CVSS 7.1, Oracle Compensation Workbench)
- [CVE-2026-60795](https://cve.now/CVE-2026-60795.md): Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). (CVSS 6.8, Oracle iSetup)
- [CVE-2026-60794](https://cve.now/CVE-2026-60794.md): Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle TeleSales)
- [CVE-2026-60793](https://cve.now/CVE-2026-60793.md): Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle TeleSales)
- [CVE-2026-60790](https://cve.now/CVE-2026-60790.md): Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.0, Oracle Sales Offline)
- [CVE-2026-60789](https://cve.now/CVE-2026-60789.md): Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Sales Offline)
- [CVE-2026-60788](https://cve.now/CVE-2026-60788.md): Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.3, Oracle Sales Offline)
- [CVE-2026-60787](https://cve.now/CVE-2026-60787.md): Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Receivables)
- [CVE-2026-60786](https://cve.now/CVE-2026-60786.md): Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Receivables)
- [CVE-2026-60785](https://cve.now/CVE-2026-60785.md): Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). (CVSS 8.1, Oracle iReceivables)
- [CVE-2026-60784](https://cve.now/CVE-2026-60784.md): Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). (CVSS 8.1, Oracle Trading Community)
- [CVE-2026-60783](https://cve.now/CVE-2026-60783.md): Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). (CVSS 8.8, Oracle iReceivables)
- [CVE-2026-60780](https://cve.now/CVE-2026-60780.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Workflow)
- [CVE-2026-60778](https://cve.now/CVE-2026-60778.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 8.1, Oracle Payments)
- [CVE-2026-60777](https://cve.now/CVE-2026-60777.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 6.3, Oracle Application Object Library)
- [CVE-2026-60776](https://cve.now/CVE-2026-60776.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: AOL Generic Loader). (CVSS 6.7, Oracle Application Object Library)
- [CVE-2026-60775](https://cve.now/CVE-2026-60775.md): Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.7, Oracle Pasta)
- [CVE-2026-60774](https://cve.now/CVE-2026-60774.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean \[Incl. (CVSS 7.1, Oracle Applications Framework)
- [CVE-2026-60773](https://cve.now/CVE-2026-60773.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 9.6, Oracle Application Object Library)
- [CVE-2026-60772](https://cve.now/CVE-2026-60772.md): Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). (CVSS 7.1, Oracle Financials Common Modules)
- [CVE-2026-60771](https://cve.now/CVE-2026-60771.md): Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Complex Maintenance, Repair and Overhaul)
- [CVE-2026-60770](https://cve.now/CVE-2026-60770.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 7.5, Oracle Application Object Library)
- [CVE-2026-60768](https://cve.now/CVE-2026-60768.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting). (CVSS 8.1, Oracle Applications Framework)
- [CVE-2026-60764](https://cve.now/CVE-2026-60764.md): Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). (CVSS 8.1, Oracle Financials Common Modules)
- [CVE-2026-60763](https://cve.now/CVE-2026-60763.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). (CVSS 8.4, Oracle Applications Manager)
- [CVE-2026-60762](https://cve.now/CVE-2026-60762.md): Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Configuration). (CVSS 5.7, Oracle Applications Technology Stack)
- [CVE-2026-60761](https://cve.now/CVE-2026-60761.md): Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Applications DBA)
- [CVE-2026-60760](https://cve.now/CVE-2026-60760.md): Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 4.2, Oracle Enterprise Asset Management)
- [CVE-2026-60756](https://cve.now/CVE-2026-60756.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). (CVSS 8.1, Oracle EDI Gateway)
- [CVE-2026-60755](https://cve.now/CVE-2026-60755.md): Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Assets)
- [CVE-2026-60750](https://cve.now/CVE-2026-60750.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Payroll)
- [CVE-2026-60749](https://cve.now/CVE-2026-60749.md): Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Assets)
- [CVE-2026-60747](https://cve.now/CVE-2026-60747.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 6.2, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60744](https://cve.now/CVE-2026-60744.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.8, Oracle Cost Management)
- [CVE-2026-60741](https://cve.now/CVE-2026-60741.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Cost Management)
- [CVE-2026-60740](https://cve.now/CVE-2026-60740.md): Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Cash Management)
- [CVE-2026-60739](https://cve.now/CVE-2026-60739.md): Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Field Service)
- [CVE-2026-60738](https://cve.now/CVE-2026-60738.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). (CVSS 8.8, Oracle Installed Base)
- [CVE-2026-60736](https://cve.now/CVE-2026-60736.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). (CVSS 8.1, Oracle E-Business Intelligence)
- [CVE-2026-60735](https://cve.now/CVE-2026-60735.md): Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Sales Offline)
- [CVE-2026-60734](https://cve.now/CVE-2026-60734.md): Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). (CVSS 7.2, Oracle Trading Community)
- [CVE-2026-60732](https://cve.now/CVE-2026-60732.md): Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). (CVSS 8.1, Oracle iReceivables)
- [CVE-2026-60725](https://cve.now/CVE-2026-60725.md): Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). (CVSS 7.4, Oracle MySQL Router)
- [CVE-2026-60724](https://cve.now/CVE-2026-60724.md): Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). (CVSS 5.4, Oracle Customer Interaction History)
- [CVE-2026-60723](https://cve.now/CVE-2026-60723.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place). (CVSS 8.4, Oracle Data Integrator)
- [CVE-2026-60719](https://cve.now/CVE-2026-60719.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). (CVSS 9.9, Oracle BI Publisher)
- [CVE-2026-60718](https://cve.now/CVE-2026-60718.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60717](https://cve.now/CVE-2026-60717.md): Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Common Utilities). (CVSS 5.4, Oracle Complex Maintenance, Repair and Overhaul)
- [CVE-2026-60714](https://cve.now/CVE-2026-60714.md): Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Price Protection)
- [CVE-2026-60713](https://cve.now/CVE-2026-60713.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 4.4, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-60712](https://cve.now/CVE-2026-60712.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 6.5, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-60711](https://cve.now/CVE-2026-60711.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.9, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-60710](https://cve.now/CVE-2026-60710.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle EDI Gateway)
- [CVE-2026-60709](https://cve.now/CVE-2026-60709.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 4.2, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-60708](https://cve.now/CVE-2026-60708.md): Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Financials)
- [CVE-2026-60706](https://cve.now/CVE-2026-60706.md): Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Inventory)
- [CVE-2026-60705](https://cve.now/CVE-2026-60705.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 7.0, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-60704](https://cve.now/CVE-2026-60704.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 7.5, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-60703](https://cve.now/CVE-2026-60703.md): Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Interaction Blending)
- [CVE-2026-60701](https://cve.now/CVE-2026-60701.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). (CVSS 6.6, Oracle Universal Work Queue)
- [CVE-2026-60700](https://cve.now/CVE-2026-60700.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: UWQ Server Issues). (CVSS 8.1, Oracle Universal Work Queue)
- [CVE-2026-60697](https://cve.now/CVE-2026-60697.md): Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Site Hierarchy Flows). (CVSS 6.3, Oracle Site Hub)
- [CVE-2026-60695](https://cve.now/CVE-2026-60695.md): Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.9, Oracle Enterprise Asset Management)
- [CVE-2026-60694](https://cve.now/CVE-2026-60694.md): Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Enterprise Asset Management)
- [CVE-2026-60692](https://cve.now/CVE-2026-60692.md): Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Enterprise Asset Management)
- [CVE-2026-60691](https://cve.now/CVE-2026-60691.md): Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Content Manager)
- [CVE-2026-60690](https://cve.now/CVE-2026-60690.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 7.7, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-60689](https://cve.now/CVE-2026-60689.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 7.5, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-60688](https://cve.now/CVE-2026-60688.md): Vulnerability in the Oracle Scheduler product of Oracle E-Business Suite (component: Rules UI). (CVSS 6.3, Oracle Scheduler)
- [CVE-2026-60687](https://cve.now/CVE-2026-60687.md): Vulnerability in the Oracle U.S. (CVSS 6.8, Oracle U.S. Federal Financials)
- [CVE-2026-60686](https://cve.now/CVE-2026-60686.md): Vulnerability in the Oracle U.S. (CVSS 8.1, Oracle U.S. Federal Financials)
- [CVE-2026-60685](https://cve.now/CVE-2026-60685.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.1, Oracle iSupport)
- [CVE-2026-60684](https://cve.now/CVE-2026-60684.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). (CVSS 4.6, Oracle Applications Framework)
- [CVE-2026-60683](https://cve.now/CVE-2026-60683.md): Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Process Manufacturing Regulatory Management)
- [CVE-2026-60681](https://cve.now/CVE-2026-60681.md): Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Process Manufacturing Regulatory Management)
- [CVE-2026-60678](https://cve.now/CVE-2026-60678.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle General Ledger)
- [CVE-2026-60677](https://cve.now/CVE-2026-60677.md): Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite (component: Oracle Common Modules). (CVSS 8.4, Oracle Common Application Components)
- [CVE-2026-60676](https://cve.now/CVE-2026-60676.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). (CVSS 8.8, Oracle Applications Framework)
- [CVE-2026-60675](https://cve.now/CVE-2026-60675.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). (CVSS 8.8, Oracle Applications Framework)
- [CVE-2026-60674](https://cve.now/CVE-2026-60674.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 8.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-60673](https://cve.now/CVE-2026-60673.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). (CVSS 6.5, Oracle BI Publisher)
- [CVE-2026-60671](https://cve.now/CVE-2026-60671.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 8.6, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-60670](https://cve.now/CVE-2026-60670.md): Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Client System Analyzer). (CVSS 8.1, Oracle Applications Technology Stack)
- [CVE-2026-60669](https://cve.now/CVE-2026-60669.md): Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Mexico product of Oracle PeopleSoft (component: Global Payroll for Mexico). (CVSS 5.9, Oracle PeopleSoft Enterprise HCM Global Payroll Mexico)
- [CVE-2026-60668](https://cve.now/CVE-2026-60668.md): Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: French Public Sector Specific). (CVSS 8.2, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2026-60667](https://cve.now/CVE-2026-60667.md): Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Core). (CVSS 7.4, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2026-60666](https://cve.now/CVE-2026-60666.md): Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Security). (CVSS 6.8, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2026-60665](https://cve.now/CVE-2026-60665.md): Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switze (CVSS 8.2, Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland)
- [CVE-2026-60664](https://cve.now/CVE-2026-60664.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60663](https://cve.now/CVE-2026-60663.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 9.9, Oracle WebCenter Content)
- [CVE-2026-60661](https://cve.now/CVE-2026-60661.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). (CVSS 7.8, Oracle Solaris)
- [CVE-2026-60659](https://cve.now/CVE-2026-60659.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). (CVSS 7.1, Oracle Solaris)
- [CVE-2026-60658](https://cve.now/CVE-2026-60658.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.5, Oracle WebCenter Content)
- [CVE-2026-60657](https://cve.now/CVE-2026-60657.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.7, Oracle WebCenter Content)
- [CVE-2026-60656](https://cve.now/CVE-2026-60656.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60655](https://cve.now/CVE-2026-60655.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-65318](https://cve.now/CVE-2026-65318.md): Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader (CVSS 9.2, Weaviate Verba)
- [CVE-2026-60654](https://cve.now/CVE-2026-60654.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60653](https://cve.now/CVE-2026-60653.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 8.1, Oracle WebCenter Content)
- [CVE-2026-60652](https://cve.now/CVE-2026-60652.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 8.0, Oracle WebCenter Content)
- [CVE-2026-47731](https://cve.now/CVE-2026-47731.md): NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker) (CVSS 9.1, NASA-AMMOS AIT-Core · ait-core)
- [CVE-2026-60651](https://cve.now/CVE-2026-60651.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60650](https://cve.now/CVE-2026-60650.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 8.0, Oracle WebCenter Content)
- [CVE-2026-60649](https://cve.now/CVE-2026-60649.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 9.1, Oracle WebCenter Content)
- [CVE-2026-60648](https://cve.now/CVE-2026-60648.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 8.0, Oracle WebCenter Content)
- [CVE-2026-60647](https://cve.now/CVE-2026-60647.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-60646](https://cve.now/CVE-2026-60646.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 8.0, Oracle WebCenter Content)
- [CVE-2026-60645](https://cve.now/CVE-2026-60645.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 7.2, Oracle WebCenter Content)
- [CVE-2026-60644](https://cve.now/CVE-2026-60644.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). (CVSS 10.0, Oracle WebCenter Content)
- [CVE-2026-60643](https://cve.now/CVE-2026-60643.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.0, Oracle WebCenter Content)
- [CVE-2026-60642](https://cve.now/CVE-2026-60642.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.6, Oracle WebCenter Content)
- [CVE-2026-60641](https://cve.now/CVE-2026-60641.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.6, Oracle WebCenter Content)
- [CVE-2026-60640](https://cve.now/CVE-2026-60640.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.3, Oracle WebCenter Content)
- [CVE-2026-56746](https://cve.now/CVE-2026-56746.md): Netty has a Security Control Bypass via CORS Short-Circuit Failure (CVSS 6.5, netty · io.netty:netty-codec-http)
- [CVE-2026-60639](https://cve.now/CVE-2026-60639.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60638](https://cve.now/CVE-2026-60638.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60637](https://cve.now/CVE-2026-60637.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60636](https://cve.now/CVE-2026-60636.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60635](https://cve.now/CVE-2026-60635.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60634](https://cve.now/CVE-2026-60634.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60633](https://cve.now/CVE-2026-60633.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60632](https://cve.now/CVE-2026-60632.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 9.3, Oracle WebCenter Content)
- [CVE-2026-60631](https://cve.now/CVE-2026-60631.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 9.3, Oracle WebCenter Content)
- [CVE-2026-60630](https://cve.now/CVE-2026-60630.md): Vulnerability in Oracle APEX (component: Installation). (CVSS 5.5, Oracle APEX)
- [CVE-2026-60629](https://cve.now/CVE-2026-60629.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools). (CVSS 7.5, Oracle JDeveloper)
- [CVE-2026-60628](https://cve.now/CVE-2026-60628.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 3.7, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-60627](https://cve.now/CVE-2026-60627.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 9.9, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-60626](https://cve.now/CVE-2026-60626.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 6.0, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-60625](https://cve.now/CVE-2026-60625.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio). (CVSS 7.8, Oracle Data Integrator)
- [CVE-2026-60624](https://cve.now/CVE-2026-60624.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 6.5, Oracle MySQL Connectors)
- [CVE-2026-60623](https://cve.now/CVE-2026-60623.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 7.1, Oracle MySQL Connectors)
- [CVE-2026-60622](https://cve.now/CVE-2026-60622.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). (CVSS 7.5, Oracle JDeveloper)
- [CVE-2026-60621](https://cve.now/CVE-2026-60621.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-60620](https://cve.now/CVE-2026-60620.md): Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management). (CVSS 6.4, Oracle JD Edwards EnterpriseOne Configurator)
- [CVE-2026-60619](https://cve.now/CVE-2026-60619.md): Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: Time Accounting and HRM Base). (CVSS 7.5, Oracle JD Edwards EnterpriseOne HCM Foundation)
- [CVE-2026-60618](https://cve.now/CVE-2026-60618.md): Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards (component: Procurement). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Procurement and Subcontract…)
- [CVE-2026-60617](https://cve.now/CVE-2026-60617.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). (CVSS 6.5, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-60616](https://cve.now/CVE-2026-60616.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). (CVSS 6.5, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-60615](https://cve.now/CVE-2026-60615.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). (CVSS 8.2, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-60614](https://cve.now/CVE-2026-60614.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Person Data). (CVSS 7.1, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-60613](https://cve.now/CVE-2026-60613.md): Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). (CVSS 6.6, Oracle PeopleSoft Enterprise CS Student Records)
- [CVE-2026-60612](https://cve.now/CVE-2026-60612.md): Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Commonline Loans). (CVSS 6.8, Oracle PeopleSoft Enterprise CS Financial Aid)
- [CVE-2026-60611](https://cve.now/CVE-2026-60611.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). (CVSS 5.3, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-60610](https://cve.now/CVE-2026-60610.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). (CVSS 5.9, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-60609](https://cve.now/CVE-2026-60609.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Communication). (CVSS 6.5, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-60608](https://cve.now/CVE-2026-60608.md): Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Institutional Methodology Need Analysis (CVSS 6.1, Oracle PeopleSoft Enterprise CS Financial Aid)
- [CVE-2026-60607](https://cve.now/CVE-2026-60607.md): Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: FM Need Analysis Calculator). (CVSS 5.5, Oracle PeopleSoft Enterprise CS Financial Aid)
- [CVE-2026-60606](https://cve.now/CVE-2026-60606.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects (CVSS 9.1, Oracle PeopleSoft Enterprise CC Common Application Objects)
- [CVE-2026-60605](https://cve.now/CVE-2026-60605.md): Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Higher Ed Statistics Agency - UK HESA (CVSS 7.5, Oracle PeopleSoft Enterprise CS Student Records)
- [CVE-2026-60604](https://cve.now/CVE-2026-60604.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). (CVSS 7.5, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-60603](https://cve.now/CVE-2026-60603.md): Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Australian Features). (CVSS 8.8, Oracle PeopleSoft Enterprise CS Student Records)
- [CVE-2026-60602](https://cve.now/CVE-2026-60602.md): Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Billing). (CVSS 8.8, Oracle PeopleSoft Enterprise CS Student Financials)
- [CVE-2026-60601](https://cve.now/CVE-2026-60601.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security). (CVSS 4.4, Oracle PeopleSoft Enterprise FIN Common Objects)
- [CVE-2026-60600](https://cve.now/CVE-2026-60600.md): Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). (CVSS 7.8, Oracle PeopleSoft Enterprise FIN Project Costing)
- [CVE-2026-60599](https://cve.now/CVE-2026-60599.md): Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). (CVSS 8.1, Oracle PeopleSoft Enterprise CS Student Records)
- [CVE-2026-60598](https://cve.now/CVE-2026-60598.md): Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). (CVSS 7.5, Oracle PeopleSoft Enterprise CS Student Records)
- [CVE-2026-60597](https://cve.now/CVE-2026-60597.md): Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). (CVSS 8.7, Oracle PeopleSoft Enterprise FIN Cash Management)
- [CVE-2026-60596](https://cve.now/CVE-2026-60596.md): Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). (CVSS 2.3, Oracle PeopleSoft Enterprise FIN eSettlements)
- [CVE-2026-60595](https://cve.now/CVE-2026-60595.md): Vulnerability in the PeopleSoft Enterprise FIN Pay/Bill Management product of Oracle PeopleSoft (component: Paybill Management). (CVSS 5.5, Oracle PeopleSoft Enterprise FIN Pay/Bill Management)
- [CVE-2026-60594](https://cve.now/CVE-2026-60594.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Integration and Interfaces). (CVSS 8.8, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2026-60593](https://cve.now/CVE-2026-60593.md): Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft (component: Staffing Front Office). (CVSS 7.5, Oracle PeopleSoft Enterprise FIN Staffing Front Office)
- [CVE-2026-60588](https://cve.now/CVE-2026-60588.md): Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Work Definition Issues). (CVSS 5.4, Oracle Enterprise Asset Management)
- [CVE-2026-60587](https://cve.now/CVE-2026-60587.md): Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Project Definition). (CVSS 6.3, Oracle Project Foundation)
- [CVE-2026-60586](https://cve.now/CVE-2026-60586.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 7.7, Oracle MySQL Connectors)
- [CVE-2026-60585](https://cve.now/CVE-2026-60585.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 6.6, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60584](https://cve.now/CVE-2026-60584.md): Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management). (CVSS 7.6, Oracle Transportation Management)
- [CVE-2026-60583](https://cve.now/CVE-2026-60583.md): Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install). (CVSS 8.8, Oracle Transportation Management)
- [CVE-2026-60582](https://cve.now/CVE-2026-60582.md): Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). (CVSS 8.3, Oracle Enterprise Command Center Framework)
- [CVE-2026-60581](https://cve.now/CVE-2026-60581.md): Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). (CVSS 7.5, Oracle Enterprise Command Center Framework)
- [CVE-2026-60580](https://cve.now/CVE-2026-60580.md): Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). (CVSS 8.8, Oracle Enterprise Command Center Framework)
- [CVE-2026-60579](https://cve.now/CVE-2026-60579.md): Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). (CVSS 8.0, Oracle Enterprise Command Center Framework)
- [CVE-2026-60578](https://cve.now/CVE-2026-60578.md): Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). (CVSS 7.6, Oracle Enterprise Command Center Framework)
- [CVE-2026-60577](https://cve.now/CVE-2026-60577.md): Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). (CVSS 7.1, Oracle Enterprise Command Center Framework)
- [CVE-2026-60576](https://cve.now/CVE-2026-60576.md): Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). (CVSS 7.2, Oracle Enterprise Command Center Framework)
- [CVE-2026-60575](https://cve.now/CVE-2026-60575.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 6.3, Oracle Workflow)
- [CVE-2026-60574](https://cve.now/CVE-2026-60574.md): Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Cover Letter). (CVSS 6.3, Oracle Content Manager)
- [CVE-2026-60573](https://cve.now/CVE-2026-60573.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Partner Dashboard). (CVSS 6.3, Oracle Partner Management)
- [CVE-2026-60572](https://cve.now/CVE-2026-60572.md): Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Web Service Provider). (CVSS 6.3, Oracle E-Business Suite Integrated SOA Gateway)
- [CVE-2026-60571](https://cve.now/CVE-2026-60571.md): Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Installation). (CVSS 5.4, Oracle SDP Number Portability)
- [CVE-2026-60570](https://cve.now/CVE-2026-60570.md): Vulnerability in Oracle GoldenGate (component: Libraries). (CVSS 7.8, Oracle GoldenGate)
- [CVE-2026-60569](https://cve.now/CVE-2026-60569.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). (CVSS 5.1, Oracle MySQL Cluster)
- [CVE-2026-60568](https://cve.now/CVE-2026-60568.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 9.9, Oracle WebCenter Portal)
- [CVE-2026-60567](https://cve.now/CVE-2026-60567.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.1, Oracle Identity Manager)
- [CVE-2026-60566](https://cve.now/CVE-2026-60566.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 9.8, Oracle WebCenter Portal)
- [CVE-2026-60565](https://cve.now/CVE-2026-60565.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 9.9, Oracle WebCenter Portal)
- [CVE-2026-60564](https://cve.now/CVE-2026-60564.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 9.6, Oracle WebCenter Portal)
- [CVE-2026-60563](https://cve.now/CVE-2026-60563.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.8, Oracle WebCenter Portal)
- [CVE-2026-60562](https://cve.now/CVE-2026-60562.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 9.9, Oracle WebCenter Portal)
- [CVE-2026-60561](https://cve.now/CVE-2026-60561.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 9.9, Oracle WebCenter Portal)
- [CVE-2026-60560](https://cve.now/CVE-2026-60560.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). (CVSS 8.1, Oracle Identity Manager)
- [CVE-2026-60559](https://cve.now/CVE-2026-60559.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.6, Oracle Access Manager)
- [CVE-2026-60558](https://cve.now/CVE-2026-60558.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.1, Oracle WebCenter Sites)
- [CVE-2026-60557](https://cve.now/CVE-2026-60557.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 6.5, Oracle WebCenter Sites)
- [CVE-2026-60556](https://cve.now/CVE-2026-60556.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.6, Oracle WebCenter Sites)
- [CVE-2026-60555](https://cve.now/CVE-2026-60555.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.8, Oracle WebCenter Sites)
- [CVE-2026-60554](https://cve.now/CVE-2026-60554.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 7.5, Oracle WebCenter Sites)
- [CVE-2026-60553](https://cve.now/CVE-2026-60553.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.7, Oracle WebCenter Sites)
- [CVE-2026-60552](https://cve.now/CVE-2026-60552.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.9, Oracle WebCenter Sites)
- [CVE-2026-60551](https://cve.now/CVE-2026-60551.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.8, Oracle WebCenter Sites)
- [CVE-2026-60550](https://cve.now/CVE-2026-60550.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.6, Oracle WebCenter Sites)
- [CVE-2026-60549](https://cve.now/CVE-2026-60549.md): Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). (CVSS 8.8, Oracle Managed File Transfer)
- [CVE-2026-60548](https://cve.now/CVE-2026-60548.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). (CVSS 7.7, Oracle SOA Suite)
- [CVE-2026-60547](https://cve.now/CVE-2026-60547.md): Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). (CVSS 9.9, Oracle Managed File Transfer)
- [CVE-2026-60546](https://cve.now/CVE-2026-60546.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). (CVSS 7.2, Oracle SOA Suite)
- [CVE-2026-60545](https://cve.now/CVE-2026-60545.md): Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). (CVSS 8.8, Oracle Managed File Transfer)
- [CVE-2026-60544](https://cve.now/CVE-2026-60544.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). (CVSS 8.2, Oracle SOA Suite)
- [CVE-2026-60543](https://cve.now/CVE-2026-60543.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). (CVSS 8.1, Oracle SOA Suite)
- [CVE-2026-60542](https://cve.now/CVE-2026-60542.md): Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). (CVSS 9.9, Oracle Business Process Management Suite)
- [CVE-2026-60541](https://cve.now/CVE-2026-60541.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). (CVSS 9.8, Oracle SOA Suite)
- [CVE-2026-60540](https://cve.now/CVE-2026-60540.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). (CVSS 9.6, Oracle SOA Suite)
- [CVE-2026-60539](https://cve.now/CVE-2026-60539.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration Business Insight). (CVSS 8.8, Oracle SOA Suite)
- [CVE-2026-60538](https://cve.now/CVE-2026-60538.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). (CVSS 9.8, Oracle SOA Suite)
- [CVE-2026-60537](https://cve.now/CVE-2026-60537.md): Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). (CVSS 9.9, Oracle Managed File Transfer)
- [CVE-2026-60536](https://cve.now/CVE-2026-60536.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). (CVSS 8.6, Oracle Identity Manager Connector)
- [CVE-2026-60535](https://cve.now/CVE-2026-60535.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). (CVSS 9.8, Oracle Identity Manager Connector)
- [CVE-2026-60534](https://cve.now/CVE-2026-60534.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). (CVSS 7.7, Oracle Identity Manager Connector)
- [CVE-2026-60533](https://cve.now/CVE-2026-60533.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). (CVSS 8.0, Oracle Identity Manager Connector)
- [CVE-2026-60532](https://cve.now/CVE-2026-60532.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). (CVSS 9.8, Oracle Identity Manager Connector)
- [CVE-2026-60531](https://cve.now/CVE-2026-60531.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 9.9, Oracle Identity Manager Connector)
- [CVE-2026-60530](https://cve.now/CVE-2026-60530.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod\_http2.so). (CVSS 7.8, Oracle HTTP Server)
- [CVE-2026-60529](https://cve.now/CVE-2026-60529.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2026-60528](https://cve.now/CVE-2026-60528.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 7.6, Oracle WebLogic Server)
- [CVE-2026-60527](https://cve.now/CVE-2026-60527.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 7.1, Oracle WebLogic Server)
- [CVE-2026-60526](https://cve.now/CVE-2026-60526.md): Vulnerability in Oracle Java SE (component: Installation). (CVSS 6.7, Oracle Java SE)
- [CVE-2026-60525](https://cve.now/CVE-2026-60525.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.2, Oracle WebCenter Content)
- [CVE-2026-60524](https://cve.now/CVE-2026-60524.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60523](https://cve.now/CVE-2026-60523.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60522](https://cve.now/CVE-2026-60522.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.6, Oracle WebCenter Content)
- [CVE-2026-60521](https://cve.now/CVE-2026-60521.md): Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price List). (CVSS 6.5, Oracle Advanced Pricing)
- [CVE-2026-60520](https://cve.now/CVE-2026-60520.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.1, Oracle Unified Directory)
- [CVE-2026-60519](https://cve.now/CVE-2026-60519.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.2, Oracle Unified Directory)
- [CVE-2026-60503](https://cve.now/CVE-2026-60503.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle WebCenter Content: Imaging)
- [CVE-2026-60502](https://cve.now/CVE-2026-60502.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 7.2, Oracle WebCenter Content: Imaging)
- [CVE-2026-60501](https://cve.now/CVE-2026-60501.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 5.2, Oracle Service Delivery Platform)
- [CVE-2026-60499](https://cve.now/CVE-2026-60499.md): Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle JD Edwards (component: Solution Advisor). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Solution Advisor)
- [CVE-2026-60498](https://cve.now/CVE-2026-60498.md): Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). (CVSS 7.5, Oracle JD Edwards EnterpriseOne Human Resources Management)
- [CVE-2026-60497](https://cve.now/CVE-2026-60497.md): Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). (CVSS 7.5, Oracle JD Edwards EnterpriseOne CRM Foundation)
- [CVE-2026-60496](https://cve.now/CVE-2026-60496.md): Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement product of Oracle JD Edwards (component: Advanced Pricing). (CVSS 7.5, Oracle JD Edwards EnterpriseOne Advanced Pricing - Procurem…)
- [CVE-2026-60495](https://cve.now/CVE-2026-60495.md): Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of Oracle JD Edwards (component: Requirements Planning). (CVSS 7.5, Oracle JD Edwards EnterpriseOne Requirements Planning)
- [CVE-2026-60494](https://cve.now/CVE-2026-60494.md): Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). (CVSS 7.0, Oracle JD Edwards EnterpriseOne General Ledger)
- [CVE-2026-60493](https://cve.now/CVE-2026-60493.md): Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Human Resources Management)
- [CVE-2026-60492](https://cve.now/CVE-2026-60492.md): Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards (component: OW HR PR Foundation). (CVSS 7.1, Oracle JD Edwards EnterpriseOne HCM Foundation)
- [CVE-2026-60491](https://cve.now/CVE-2026-60491.md): Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: SDK client integration). (CVSS 6.3, Oracle Advanced Inbound Telephony)
- [CVE-2026-60490](https://cve.now/CVE-2026-60490.md): Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). (CVSS 8.8, Oracle JD Edwards EnterpriseOne CRM Foundation)
- [CVE-2026-60489](https://cve.now/CVE-2026-60489.md): Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle JD Edwards (component: CRM Foundation). (CVSS 8.8, Oracle JD Edwards EnterpriseOne CRM Foundation)
- [CVE-2026-60472](https://cve.now/CVE-2026-60472.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle WebCenter Content: Imaging)
- [CVE-2026-60471](https://cve.now/CVE-2026-60471.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 8.3, Oracle WebCenter Content: Imaging)
- [CVE-2026-60470](https://cve.now/CVE-2026-60470.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 8.7, Oracle WebCenter Content: Imaging)
- [CVE-2026-60469](https://cve.now/CVE-2026-60469.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 8.7, Oracle WebCenter Content: Imaging)
- [CVE-2026-60468](https://cve.now/CVE-2026-60468.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 7.1, Oracle WebCenter Content: Imaging)
- [CVE-2026-60467](https://cve.now/CVE-2026-60467.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle WebCenter Content: Imaging)
- [CVE-2026-60466](https://cve.now/CVE-2026-60466.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 7.2, Oracle WebCenter Content: Imaging)
- [CVE-2026-60465](https://cve.now/CVE-2026-60465.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle WebCenter Content: Imaging)
- [CVE-2026-60464](https://cve.now/CVE-2026-60464.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle WebCenter Content: Imaging)
- [CVE-2026-60463](https://cve.now/CVE-2026-60463.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebCenter Content: Imaging)
- [CVE-2026-60462](https://cve.now/CVE-2026-60462.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.1, Oracle WebCenter Content)
- [CVE-2026-60461](https://cve.now/CVE-2026-60461.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60460](https://cve.now/CVE-2026-60460.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60459](https://cve.now/CVE-2026-60459.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60458](https://cve.now/CVE-2026-60458.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60457](https://cve.now/CVE-2026-60457.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60456](https://cve.now/CVE-2026-60456.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60454](https://cve.now/CVE-2026-60454.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.8, Oracle HTTP Server)
- [CVE-2026-60452](https://cve.now/CVE-2026-60452.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 8.5, Oracle WebCenter Content: Imaging)
- [CVE-2026-60451](https://cve.now/CVE-2026-60451.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 7.1, Oracle WebCenter Content: Imaging)
- [CVE-2026-60450](https://cve.now/CVE-2026-60450.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.1, Oracle WebCenter Content)
- [CVE-2026-60449](https://cve.now/CVE-2026-60449.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-60448](https://cve.now/CVE-2026-60448.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60447](https://cve.now/CVE-2026-60447.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60446](https://cve.now/CVE-2026-60446.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60445](https://cve.now/CVE-2026-60445.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60444](https://cve.now/CVE-2026-60444.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.5, Oracle WebCenter Content)
- [CVE-2026-60443](https://cve.now/CVE-2026-60443.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60442](https://cve.now/CVE-2026-60442.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60441](https://cve.now/CVE-2026-60441.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60440](https://cve.now/CVE-2026-60440.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 7.7, Oracle Service Delivery Platform)
- [CVE-2026-60438](https://cve.now/CVE-2026-60438.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod\_ssl). (CVSS 9.1, Oracle HTTP Server)
- [CVE-2026-60437](https://cve.now/CVE-2026-60437.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.7, Oracle Unified Directory)
- [CVE-2026-60436](https://cve.now/CVE-2026-60436.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.5, Oracle Unified Directory)
- [CVE-2026-60435](https://cve.now/CVE-2026-60435.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 9.8, Oracle WebCenter Content)
- [CVE-2026-60434](https://cve.now/CVE-2026-60434.md): Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). (CVSS 4.3, Oracle Transportation Management)
- [CVE-2026-60433](https://cve.now/CVE-2026-60433.md): Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Integration). (CVSS 6.5, Oracle Transportation Management)
- [CVE-2026-60431](https://cve.now/CVE-2026-60431.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod\_proxy). (CVSS 8.6, Oracle HTTP Server)
- [CVE-2026-60430](https://cve.now/CVE-2026-60430.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.8, Oracle Unified Directory)
- [CVE-2026-60429](https://cve.now/CVE-2026-60429.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 9.9, Oracle Unified Directory)
- [CVE-2026-60428](https://cve.now/CVE-2026-60428.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.2, Oracle Unified Directory)
- [CVE-2026-60427](https://cve.now/CVE-2026-60427.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.7, Oracle Unified Directory)
- [CVE-2026-60426](https://cve.now/CVE-2026-60426.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.5, Oracle Unified Directory)
- [CVE-2026-60425](https://cve.now/CVE-2026-60425.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.5, Oracle Unified Directory)
- [CVE-2026-60424](https://cve.now/CVE-2026-60424.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 9.0, Oracle Unified Directory)
- [CVE-2026-60423](https://cve.now/CVE-2026-60423.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.8, Oracle Unified Directory)
- [CVE-2026-60422](https://cve.now/CVE-2026-60422.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 9.9, Oracle Unified Directory)
- [CVE-2026-60421](https://cve.now/CVE-2026-60421.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.2, Oracle Unified Directory)
- [CVE-2026-60420](https://cve.now/CVE-2026-60420.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.5, Oracle Unified Directory)
- [CVE-2026-60419](https://cve.now/CVE-2026-60419.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.8, Oracle Unified Directory)
- [CVE-2026-60418](https://cve.now/CVE-2026-60418.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.2, Oracle Unified Directory)
- [CVE-2026-60417](https://cve.now/CVE-2026-60417.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.1, Oracle Unified Directory)
- [CVE-2026-60416](https://cve.now/CVE-2026-60416.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.1, Oracle Access Manager)
- [CVE-2026-60411](https://cve.now/CVE-2026-60411.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: ttcserver). (CVSS 6.5, Oracle TimesTen In-Memory Database)
- [CVE-2026-60410](https://cve.now/CVE-2026-60410.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 4.3, Oracle TimesTen In-Memory Database)
- [CVE-2026-60409](https://cve.now/CVE-2026-60409.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 5.7, Oracle TimesTen In-Memory Database)
- [CVE-2026-60408](https://cve.now/CVE-2026-60408.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 4.3, Oracle TimesTen In-Memory Database)
- [CVE-2026-60407](https://cve.now/CVE-2026-60407.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 5.6, Oracle TimesTen In-Memory Database)
- [CVE-2026-60406](https://cve.now/CVE-2026-60406.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 6.7, Oracle TimesTen In-Memory Database)
- [CVE-2026-60405](https://cve.now/CVE-2026-60405.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 3.8, Oracle TimesTen In-Memory Database)
- [CVE-2026-60404](https://cve.now/CVE-2026-60404.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 6.5, Oracle TimesTen In-Memory Database)
- [CVE-2026-60403](https://cve.now/CVE-2026-60403.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 6.5, Oracle TimesTen In-Memory Database)
- [CVE-2026-60402](https://cve.now/CVE-2026-60402.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 9.9, Oracle TimesTen In-Memory Database)
- [CVE-2026-60401](https://cve.now/CVE-2026-60401.md): Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 6.5, Oracle TimesTen In-Memory Database)
- [CVE-2026-60400](https://cve.now/CVE-2026-60400.md): Vulnerability in Oracle GoldenGate (component: Admin Server Executable). (CVSS 8.8, Oracle GoldenGate)
- [CVE-2026-60399](https://cve.now/CVE-2026-60399.md): Vulnerability in Oracle GoldenGate (component: Receiver Service Executable). (CVSS 6.5, Oracle GoldenGate)
- [CVE-2026-60398](https://cve.now/CVE-2026-60398.md): Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices). (CVSS 8.8, Oracle GoldenGate)
- [CVE-2026-60397](https://cve.now/CVE-2026-60397.md): Vulnerability in Oracle GoldenGate (component: Admin Server Executable). (CVSS 4.3, Oracle GoldenGate)
- [CVE-2026-60396](https://cve.now/CVE-2026-60396.md): Vulnerability in Oracle GoldenGate (component: Distribution Server executable). (CVSS 7.2, Oracle GoldenGate)
- [CVE-2026-60395](https://cve.now/CVE-2026-60395.md): Vulnerability in Oracle GoldenGate (component: Admin Server Executable). (CVSS 4.3, Oracle GoldenGate)
- [CVE-2026-60394](https://cve.now/CVE-2026-60394.md): Vulnerability in Oracle GoldenGate (component: Admin Server Executable). (CVSS 5.3, Oracle GoldenGate)
- [CVE-2026-60389](https://cve.now/CVE-2026-60389.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 10.0, Oracle Service Delivery Platform)
- [CVE-2026-60388](https://cve.now/CVE-2026-60388.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60387](https://cve.now/CVE-2026-60387.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60386](https://cve.now/CVE-2026-60386.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60385](https://cve.now/CVE-2026-60385.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60384](https://cve.now/CVE-2026-60384.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60383](https://cve.now/CVE-2026-60383.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 8.4, Oracle Service Delivery Platform)
- [CVE-2026-60382](https://cve.now/CVE-2026-60382.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 7.5, Oracle Service Delivery Platform)
- [CVE-2026-60381](https://cve.now/CVE-2026-60381.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.9, Oracle Service Delivery Platform)
- [CVE-2026-60380](https://cve.now/CVE-2026-60380.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60379](https://cve.now/CVE-2026-60379.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 10.0, Oracle Service Delivery Platform)
- [CVE-2026-60378](https://cve.now/CVE-2026-60378.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60377](https://cve.now/CVE-2026-60377.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.9, Oracle Service Delivery Platform)
- [CVE-2026-60376](https://cve.now/CVE-2026-60376.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60375](https://cve.now/CVE-2026-60375.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60374](https://cve.now/CVE-2026-60374.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.8, Oracle Service Delivery Platform)
- [CVE-2026-60365](https://cve.now/CVE-2026-60365.md): Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for (CVSS 10.0, Oracle HTTP Server · Oracle Weblogic Server Proxy Plug-in)
- [CVE-2026-60364](https://cve.now/CVE-2026-60364.md): Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for (CVSS 9.8, Oracle HTTP Server · Oracle Weblogic Server Proxy Plug-in)
- [CVE-2026-60363](https://cve.now/CVE-2026-60363.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin). (CVSS 9.8, Oracle HTTP Server)
- [CVE-2026-60362](https://cve.now/CVE-2026-60362.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 9.8, Oracle Unified Directory)
- [CVE-2026-60361](https://cve.now/CVE-2026-60361.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 9.9, Oracle Unified Directory)
- [CVE-2026-60360](https://cve.now/CVE-2026-60360.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 10.0, Oracle Unified Directory)
- [CVE-2026-60359](https://cve.now/CVE-2026-60359.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.6, Oracle Unified Directory)
- [CVE-2026-60358](https://cve.now/CVE-2026-60358.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 10.0, Oracle Access Manager)
- [CVE-2026-60357](https://cve.now/CVE-2026-60357.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Siebel Server Sync for Exchange). (CVSS 3.7, Oracle Siebel CRM Integration)
- [CVE-2026-60356](https://cve.now/CVE-2026-60356.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.6, Oracle Access Manager)
- [CVE-2026-60355](https://cve.now/CVE-2026-60355.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 9.8, Oracle Access Manager)
- [CVE-2026-60354](https://cve.now/CVE-2026-60354.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data Visualization Tools). (CVSS 3.7, Oracle JDeveloper)
- [CVE-2026-60353](https://cve.now/CVE-2026-60353.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). (CVSS 3.1, Oracle JDeveloper)
- [CVE-2026-60352](https://cve.now/CVE-2026-60352.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). (CVSS 3.7, Oracle JDeveloper)
- [CVE-2026-60351](https://cve.now/CVE-2026-60351.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). (CVSS 4.8, Oracle JDeveloper)
- [CVE-2026-60350](https://cve.now/CVE-2026-60350.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). (CVSS 6.5, Oracle JDeveloper)
- [CVE-2026-60349](https://cve.now/CVE-2026-60349.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects). (CVSS 5.9, Oracle JDeveloper)
- [CVE-2026-60348](https://cve.now/CVE-2026-60348.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). (CVSS 5.9, Oracle JDeveloper)
- [CVE-2026-60347](https://cve.now/CVE-2026-60347.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). (CVSS 3.6, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-60346](https://cve.now/CVE-2026-60346.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability Security). (CVSS 3.7, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-60345](https://cve.now/CVE-2026-60345.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components). (CVSS 7.2, Oracle JDeveloper)
- [CVE-2026-60344](https://cve.now/CVE-2026-60344.md): Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR Payroll). (CVSS 5.4, Oracle HRMS)
- [CVE-2026-60343](https://cve.now/CVE-2026-60343.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle WebLogic Server)
- [CVE-2026-60342](https://cve.now/CVE-2026-60342.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 5.3, Oracle Access Manager)
- [CVE-2026-60340](https://cve.now/CVE-2026-60340.md): Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Enterprise Command Center). (CVSS 7.2, Oracle Project Costing)
- [CVE-2026-60339](https://cve.now/CVE-2026-60339.md): Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). (CVSS 3.1, Oracle Project Manufacturing)
- [CVE-2026-60338](https://cve.now/CVE-2026-60338.md): Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). (CVSS 3.6, Oracle Project Manufacturing)
- [CVE-2026-60337](https://cve.now/CVE-2026-60337.md): Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). (CVSS 4.7, Oracle Project Manufacturing)
- [CVE-2026-60336](https://cve.now/CVE-2026-60336.md): Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). (CVSS 5.7, Oracle Project Manufacturing)
- [CVE-2026-60335](https://cve.now/CVE-2026-60335.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.2, Oracle WebCenter Content)
- [CVE-2026-60334](https://cve.now/CVE-2026-60334.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.8, Oracle WebCenter Content)
- [CVE-2026-60333](https://cve.now/CVE-2026-60333.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 9.9, Oracle Access Manager)
- [CVE-2026-60332](https://cve.now/CVE-2026-60332.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). (CVSS 6.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60331](https://cve.now/CVE-2026-60331.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 6.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60330](https://cve.now/CVE-2026-60330.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.5, Oracle Identity Manager)
- [CVE-2026-60329](https://cve.now/CVE-2026-60329.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.8, Oracle Identity Manager)
- [CVE-2026-60328](https://cve.now/CVE-2026-60328.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 9.8, Oracle Access Manager)
- [CVE-2026-60327](https://cve.now/CVE-2026-60327.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.6, Oracle Access Manager)
- [CVE-2026-60326](https://cve.now/CVE-2026-60326.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 9.1, Oracle Access Manager)
- [CVE-2026-60325](https://cve.now/CVE-2026-60325.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.0, Oracle Access Manager)
- [CVE-2026-60324](https://cve.now/CVE-2026-60324.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60323](https://cve.now/CVE-2026-60323.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.1, Oracle Identity Manager)
- [CVE-2026-60322](https://cve.now/CVE-2026-60322.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). (CVSS 6.5, Oracle Applications Manager)
- [CVE-2026-60321](https://cve.now/CVE-2026-60321.md): Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). (CVSS 5.7, Oracle Project Manufacturing)
- [CVE-2026-60320](https://cve.now/CVE-2026-60320.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). (CVSS 7.5, Oracle Data Integrator)
- [CVE-2026-60319](https://cve.now/CVE-2026-60319.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). (CVSS 6.5, Oracle Data Integrator)
- [CVE-2026-60318](https://cve.now/CVE-2026-60318.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant). (CVSS 3.3, Oracle Data Integrator)
- [CVE-2026-60317](https://cve.now/CVE-2026-60317.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). (CVSS 7.4, Oracle MySQL Connectors)
- [CVE-2026-60316](https://cve.now/CVE-2026-60316.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). (CVSS 7.2, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60315](https://cve.now/CVE-2026-60315.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). (CVSS 8.2, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60314](https://cve.now/CVE-2026-60314.md): Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). (CVSS 7.5, Oracle MySQL Router)
- [CVE-2026-60313](https://cve.now/CVE-2026-60313.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle WebLogic Server)
- [CVE-2026-60312](https://cve.now/CVE-2026-60312.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle WebLogic Server)
- [CVE-2026-60311](https://cve.now/CVE-2026-60311.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60310](https://cve.now/CVE-2026-60310.md): Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals). (CVSS 5.4, Oracle Performance Management)
- [CVE-2026-60309](https://cve.now/CVE-2026-60309.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle Coherence)
- [CVE-2026-60308](https://cve.now/CVE-2026-60308.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60307](https://cve.now/CVE-2026-60307.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 4.3, Oracle Coherence)
- [CVE-2026-60306](https://cve.now/CVE-2026-60306.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60305](https://cve.now/CVE-2026-60305.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.1, Oracle Coherence)
- [CVE-2026-60304](https://cve.now/CVE-2026-60304.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle Coherence)
- [CVE-2026-60303](https://cve.now/CVE-2026-60303.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 4.3, Oracle Coherence)
- [CVE-2026-60302](https://cve.now/CVE-2026-60302.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60301](https://cve.now/CVE-2026-60301.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Coherence)
- [CVE-2026-60300](https://cve.now/CVE-2026-60300.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60299](https://cve.now/CVE-2026-60299.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60298](https://cve.now/CVE-2026-60298.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60297](https://cve.now/CVE-2026-60297.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60296](https://cve.now/CVE-2026-60296.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60295](https://cve.now/CVE-2026-60295.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.5, Oracle Coherence)
- [CVE-2026-60294](https://cve.now/CVE-2026-60294.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60293](https://cve.now/CVE-2026-60293.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services). (CVSS 8.6, Oracle WebLogic Server)
- [CVE-2026-60292](https://cve.now/CVE-2026-60292.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60291](https://cve.now/CVE-2026-60291.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60290](https://cve.now/CVE-2026-60290.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60289](https://cve.now/CVE-2026-60289.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60288](https://cve.now/CVE-2026-60288.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60287](https://cve.now/CVE-2026-60287.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60286](https://cve.now/CVE-2026-60286.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60285](https://cve.now/CVE-2026-60285.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60284](https://cve.now/CVE-2026-60284.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.2, Oracle Coherence)
- [CVE-2026-60283](https://cve.now/CVE-2026-60283.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 5.3, Oracle Coherence)
- [CVE-2026-60282](https://cve.now/CVE-2026-60282.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 5.4, Oracle Coherence)
- [CVE-2026-60281](https://cve.now/CVE-2026-60281.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle Coherence)
- [CVE-2026-60280](https://cve.now/CVE-2026-60280.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60279](https://cve.now/CVE-2026-60279.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60278](https://cve.now/CVE-2026-60278.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60277](https://cve.now/CVE-2026-60277.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle Coherence)
- [CVE-2026-60276](https://cve.now/CVE-2026-60276.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60275](https://cve.now/CVE-2026-60275.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60274](https://cve.now/CVE-2026-60274.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60273](https://cve.now/CVE-2026-60273.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle Coherence)
- [CVE-2026-60272](https://cve.now/CVE-2026-60272.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60271](https://cve.now/CVE-2026-60271.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.8, Oracle Coherence)
- [CVE-2026-60270](https://cve.now/CVE-2026-60270.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 5.5, Oracle Coherence)
- [CVE-2026-60269](https://cve.now/CVE-2026-60269.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60268](https://cve.now/CVE-2026-60268.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle Coherence)
- [CVE-2026-60267](https://cve.now/CVE-2026-60267.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.1, Oracle Coherence)
- [CVE-2026-60266](https://cve.now/CVE-2026-60266.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 5.9, Oracle Coherence)
- [CVE-2026-60265](https://cve.now/CVE-2026-60265.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 6.0, Oracle Coherence)
- [CVE-2026-60264](https://cve.now/CVE-2026-60264.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60263](https://cve.now/CVE-2026-60263.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Coherence)
- [CVE-2026-60262](https://cve.now/CVE-2026-60262.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60261](https://cve.now/CVE-2026-60261.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle Coherence)
- [CVE-2026-60260](https://cve.now/CVE-2026-60260.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 5.3, Oracle Coherence)
- [CVE-2026-60259](https://cve.now/CVE-2026-60259.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60258](https://cve.now/CVE-2026-60258.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60257](https://cve.now/CVE-2026-60257.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60256](https://cve.now/CVE-2026-60256.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60255](https://cve.now/CVE-2026-60255.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.2, Oracle Coherence)
- [CVE-2026-60254](https://cve.now/CVE-2026-60254.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60253](https://cve.now/CVE-2026-60253.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60252](https://cve.now/CVE-2026-60252.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Coherence)
- [CVE-2026-60251](https://cve.now/CVE-2026-60251.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60250](https://cve.now/CVE-2026-60250.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60249](https://cve.now/CVE-2026-60249.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.0, Oracle Coherence)
- [CVE-2026-60248](https://cve.now/CVE-2026-60248.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.3, Oracle Coherence)
- [CVE-2026-60247](https://cve.now/CVE-2026-60247.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60246](https://cve.now/CVE-2026-60246.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60245](https://cve.now/CVE-2026-60245.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.2, Oracle Coherence)
- [CVE-2026-60244](https://cve.now/CVE-2026-60244.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60243](https://cve.now/CVE-2026-60243.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle Coherence)
- [CVE-2026-60242](https://cve.now/CVE-2026-60242.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60241](https://cve.now/CVE-2026-60241.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60240](https://cve.now/CVE-2026-60240.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60239](https://cve.now/CVE-2026-60239.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.6, Oracle Coherence)
- [CVE-2026-60238](https://cve.now/CVE-2026-60238.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 5.4, Oracle Coherence)
- [CVE-2026-60237](https://cve.now/CVE-2026-60237.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 5.3, Oracle Coherence)
- [CVE-2026-60236](https://cve.now/CVE-2026-60236.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60235](https://cve.now/CVE-2026-60235.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.6, Oracle Coherence)
- [CVE-2026-60234](https://cve.now/CVE-2026-60234.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60233](https://cve.now/CVE-2026-60233.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 4.3, Oracle Coherence)
- [CVE-2026-60232](https://cve.now/CVE-2026-60232.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60231](https://cve.now/CVE-2026-60231.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 5.4, Oracle Coherence)
- [CVE-2026-60230](https://cve.now/CVE-2026-60230.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60229](https://cve.now/CVE-2026-60229.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60228](https://cve.now/CVE-2026-60228.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60227](https://cve.now/CVE-2026-60227.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60226](https://cve.now/CVE-2026-60226.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60225](https://cve.now/CVE-2026-60225.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60224](https://cve.now/CVE-2026-60224.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60223](https://cve.now/CVE-2026-60223.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Coherence)
- [CVE-2026-60222](https://cve.now/CVE-2026-60222.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle Coherence)
- [CVE-2026-60221](https://cve.now/CVE-2026-60221.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60220](https://cve.now/CVE-2026-60220.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.3, Oracle Coherence)
- [CVE-2026-60219](https://cve.now/CVE-2026-60219.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60218](https://cve.now/CVE-2026-60218.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle Coherence)
- [CVE-2026-60217](https://cve.now/CVE-2026-60217.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 10.0, Oracle Coherence)
- [CVE-2026-60216](https://cve.now/CVE-2026-60216.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60215](https://cve.now/CVE-2026-60215.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60214](https://cve.now/CVE-2026-60214.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.7, Oracle Coherence)
- [CVE-2026-60213](https://cve.now/CVE-2026-60213.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle Coherence)
- [CVE-2026-60212](https://cve.now/CVE-2026-60212.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60211](https://cve.now/CVE-2026-60211.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle Coherence)
- [CVE-2026-60210](https://cve.now/CVE-2026-60210.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60209](https://cve.now/CVE-2026-60209.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60208](https://cve.now/CVE-2026-60208.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.1, Oracle WebLogic Server)
- [CVE-2026-60207](https://cve.now/CVE-2026-60207.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle WebLogic Server)
- [CVE-2026-60206](https://cve.now/CVE-2026-60206.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.9, Oracle WebLogic Server)
- [CVE-2026-60205](https://cve.now/CVE-2026-60205.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60204](https://cve.now/CVE-2026-60204.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60203](https://cve.now/CVE-2026-60203.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle WebLogic Server)
- [CVE-2026-60202](https://cve.now/CVE-2026-60202.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60201](https://cve.now/CVE-2026-60201.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle WebLogic Server)
- [CVE-2026-60200](https://cve.now/CVE-2026-60200.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60199](https://cve.now/CVE-2026-60199.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60198](https://cve.now/CVE-2026-60198.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60197](https://cve.now/CVE-2026-60197.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle Coherence)
- [CVE-2026-60196](https://cve.now/CVE-2026-60196.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.4, Oracle WebLogic Server)
- [CVE-2026-60195](https://cve.now/CVE-2026-60195.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60194](https://cve.now/CVE-2026-60194.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60193](https://cve.now/CVE-2026-60193.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). (CVSS 8.5, Oracle MySQL Connectors)
- [CVE-2026-60192](https://cve.now/CVE-2026-60192.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). (CVSS 8.1, Oracle MySQL Connectors)
- [CVE-2026-60191](https://cve.now/CVE-2026-60191.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.1, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60190](https://cve.now/CVE-2026-60190.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 2.2, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60189](https://cve.now/CVE-2026-60189.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60188](https://cve.now/CVE-2026-60188.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60187](https://cve.now/CVE-2026-60187.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60186](https://cve.now/CVE-2026-60186.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60185](https://cve.now/CVE-2026-60185.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60184](https://cve.now/CVE-2026-60184.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60183](https://cve.now/CVE-2026-60183.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). (CVSS 6.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60182](https://cve.now/CVE-2026-60182.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60181](https://cve.now/CVE-2026-60181.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Configurator). (CVSS 6.7, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60180](https://cve.now/CVE-2026-60180.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). (CVSS 7.5, Oracle MySQL Connectors)
- [CVE-2026-60179](https://cve.now/CVE-2026-60179.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). (CVSS 7.4, Oracle MySQL Connectors)
- [CVE-2026-60178](https://cve.now/CVE-2026-60178.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). (CVSS 6.6, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60177](https://cve.now/CVE-2026-60177.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60176](https://cve.now/CVE-2026-60176.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.1, Oracle Payments)
- [CVE-2026-60175](https://cve.now/CVE-2026-60175.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 8.8, Oracle Database Server)
- [CVE-2026-60174](https://cve.now/CVE-2026-60174.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60173](https://cve.now/CVE-2026-60173.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). (CVSS 9.8, Oracle BI Publisher)
- [CVE-2026-60172](https://cve.now/CVE-2026-60172.md): Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform). (CVSS 6.3, Oracle Autonomous Health Framework)
- [CVE-2026-60171](https://cve.now/CVE-2026-60171.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Cluster)
- [CVE-2026-60170](https://cve.now/CVE-2026-60170.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). (CVSS 7.5, Oracle Hospitality Simphony)
- [CVE-2026-60169](https://cve.now/CVE-2026-60169.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). (CVSS 8.1, Oracle Hospitality Simphony)
- [CVE-2026-60168](https://cve.now/CVE-2026-60168.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). (CVSS 9.1, Oracle Hospitality Simphony)
- [CVE-2026-60167](https://cve.now/CVE-2026-60167.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). (CVSS 7.5, Oracle Hospitality Simphony)
- [CVE-2026-60166](https://cve.now/CVE-2026-60166.md): Vulnerability in Oracle Java SE (component: JavaFX). (CVSS 3.1, Oracle Java SE)
- [CVE-2026-60165](https://cve.now/CVE-2026-60165.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Enterprise Command Center). (CVSS 6.5, Oracle Cost Management)
- [CVE-2026-60164](https://cve.now/CVE-2026-60164.md): Vulnerability in Oracle Java SE (component: JavaFX). (CVSS 3.1, Oracle Java SE)
- [CVE-2026-60163](https://cve.now/CVE-2026-60163.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 8.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60162](https://cve.now/CVE-2026-60162.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.1, Oracle VM VirtualBox)
- [CVE-2026-60161](https://cve.now/CVE-2026-60161.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.1, Oracle VM VirtualBox)
- [CVE-2026-60160](https://cve.now/CVE-2026-60160.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.2, Oracle VM VirtualBox)
- [CVE-2026-60159](https://cve.now/CVE-2026-60159.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-60158](https://cve.now/CVE-2026-60158.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.4, Oracle VM VirtualBox)
- [CVE-2026-60157](https://cve.now/CVE-2026-60157.md): Vulnerability in Oracle GoldenGate (component: Service Manager). (CVSS 8.8, Oracle GoldenGate)
- [CVE-2026-60156](https://cve.now/CVE-2026-60156.md): Vulnerability in Oracle APEX (component: General). (CVSS 5.3, Oracle APEX)
- [CVE-2026-60155](https://cve.now/CVE-2026-60155.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-60154](https://cve.now/CVE-2026-60154.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 5.4, Oracle Application Object Library)
- [CVE-2026-60153](https://cve.now/CVE-2026-60153.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2026-60152](https://cve.now/CVE-2026-60152.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). (CVSS 5.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60150](https://cve.now/CVE-2026-60150.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2026-60149](https://cve.now/CVE-2026-60149.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 5.2, Oracle Workflow)
- [CVE-2026-60147](https://cve.now/CVE-2026-60147.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit (CVSS 6.5, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-60146](https://cve.now/CVE-2026-60146.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 6.1, Oracle Access Manager)
- [CVE-2026-60145](https://cve.now/CVE-2026-60145.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-60144](https://cve.now/CVE-2026-60144.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 3.6, Oracle Workflow)
- [CVE-2026-60143](https://cve.now/CVE-2026-60143.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 7.3, Oracle Workflow)
- [CVE-2026-47064](https://cve.now/CVE-2026-47064.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-47063](https://cve.now/CVE-2026-47063.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librari (CVSS 7.5, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-47062](https://cve.now/CVE-2026-47062.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.5, Oracle VM VirtualBox)
- [CVE-2026-47061](https://cve.now/CVE-2026-47061.md): Vulnerability in the JDBC component of Oracle Database Server. (CVSS 5.6, Oracle Database Server)
- [CVE-2026-47060](https://cve.now/CVE-2026-47060.md): Vulnerability in the JDBC component of Oracle Database Server. (CVSS 6.5, Oracle Database Server)
- [CVE-2026-47059](https://cve.now/CVE-2026-47059.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). (CVSS 3.7, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-47058](https://cve.now/CVE-2026-47058.md): Vulnerability in Oracle Java SE (component: Scripting). (CVSS 7.4, Oracle Java SE)
- [CVE-2026-47057](https://cve.now/CVE-2026-47057.md): Vulnerability in Oracle Java SE (component: Scripting). (CVSS 7.5, Oracle Java SE)
- [CVE-2026-47056](https://cve.now/CVE-2026-47056.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). (CVSS 10.0, Oracle Data Integrator)
- [CVE-2026-47055](https://cve.now/CVE-2026-47055.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.2, Oracle VM VirtualBox)
- [CVE-2026-47054](https://cve.now/CVE-2026-47054.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2026-47053](https://cve.now/CVE-2026-47053.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.6, Oracle VM VirtualBox)
- [CVE-2026-47052](https://cve.now/CVE-2026-47052.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-47051](https://cve.now/CVE-2026-47051.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 5.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-47050](https://cve.now/CVE-2026-47050.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.4, Oracle VM VirtualBox)
- [CVE-2026-47049](https://cve.now/CVE-2026-47049.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 4.9, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-47048](https://cve.now/CVE-2026-47048.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 5.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-47047](https://cve.now/CVE-2026-47047.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2026-47046](https://cve.now/CVE-2026-47046.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 8.2, Oracle Database Server)
- [CVE-2026-47045](https://cve.now/CVE-2026-47045.md): Vulnerability in the JDBC component of Oracle Database Server. (CVSS 6.8, Oracle Database Server)
- [CVE-2026-47044](https://cve.now/CVE-2026-47044.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.5, Oracle VM VirtualBox)
- [CVE-2026-47043](https://cve.now/CVE-2026-47043.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.2, Oracle VM VirtualBox)
- [CVE-2026-47041](https://cve.now/CVE-2026-47041.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-47040](https://cve.now/CVE-2026-47040.md): Vulnerability in the Oracle Net Services component of Oracle Database Server. (CVSS 9.1, Oracle Net Services)
- [CVE-2026-47039](https://cve.now/CVE-2026-47039.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 6.5, Oracle Database Server)
- [CVE-2026-47038](https://cve.now/CVE-2026-47038.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 2.7, Oracle Database Server)
- [CVE-2026-47037](https://cve.now/CVE-2026-47037.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.8, Oracle Access Manager)
- [CVE-2026-47036](https://cve.now/CVE-2026-47036.md): Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). (CVSS 9.8, Oracle Siebel CRM Development)
- [CVE-2026-43947](https://cve.now/CVE-2026-43947.md): FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass (CVSS 8.9, frangoteam FUXA · fuxa-server)
- [CVE-2026-47035](https://cve.now/CVE-2026-47035.md): Vulnerability in Oracle Java SE (component: JavaFX). (CVSS 3.1, Oracle Java SE)
- [CVE-2026-47034](https://cve.now/CVE-2026-47034.md): Vulnerability in Oracle Java SE (component: JavaFX). (CVSS 3.1, Oracle Java SE)
- [CVE-2026-47033](https://cve.now/CVE-2026-47033.md): Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.5, Oracle Contracts Integration)
- [CVE-2026-47032](https://cve.now/CVE-2026-47032.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Redwood UI). (CVSS 2.6, Oracle Siebel CRM End User)
- [CVE-2026-47031](https://cve.now/CVE-2026-47031.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). (CVSS 8.8, Oracle Bills of Material)
- [CVE-2026-47030](https://cve.now/CVE-2026-47030.md): Vulnerability in Oracle Java SE (component: JavaFX). (CVSS 3.1, Oracle Java SE)
- [CVE-2026-47028](https://cve.now/CVE-2026-47028.md): Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). (CVSS 8.1, Oracle Document Management and Collaboration)
- [CVE-2026-47027](https://cve.now/CVE-2026-47027.md): Vulnerability in Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE)
- [CVE-2026-47026](https://cve.now/CVE-2026-47026.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards). (CVSS 7.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-47024](https://cve.now/CVE-2026-47024.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). (CVSS 5.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-47023](https://cve.now/CVE-2026-47023.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-47022](https://cve.now/CVE-2026-47022.md): Vulnerability in the GoldenGate Stream Analytics product of Oracle GoldenGate (component: Security). (CVSS 3.3, Oracle GoldenGate Stream Analytics)
- [CVE-2026-47021](https://cve.now/CVE-2026-47021.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-47019](https://cve.now/CVE-2026-47019.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). (CVSS 8.1, Oracle Product Hub)
- [CVE-2026-47018](https://cve.now/CVE-2026-47018.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 7.5, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-47017](https://cve.now/CVE-2026-47017.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). (CVSS 8.7, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-47016](https://cve.now/CVE-2026-47016.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe). (CVSS 1.9, Oracle Siebel CRM Integration)
- [CVE-2026-47015](https://cve.now/CVE-2026-47015.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 7.1, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-47014](https://cve.now/CVE-2026-47014.md): Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Security). (CVSS 8.1, Oracle Product Workbench)
- [CVE-2026-47013](https://cve.now/CVE-2026-47013.md): Vulnerability in Oracle Java SE (component: JavaFX). (CVSS 5.3, Oracle Java SE)
- [CVE-2026-47012](https://cve.now/CVE-2026-47012.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-47011](https://cve.now/CVE-2026-47011.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). (CVSS 2.6, Oracle Siebel CRM Deployment)
- [CVE-2026-47010](https://cve.now/CVE-2026-47010.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO (CVSS 3.7, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-47009](https://cve.now/CVE-2026-47009.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). (CVSS 6.5, Oracle Agile PLM)
- [CVE-2026-47008](https://cve.now/CVE-2026-47008.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-47007](https://cve.now/CVE-2026-47007.md): Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications (component: On-premise Deployment). (CVSS 7.3, Oracle Communications Pricing Design Center)
- [CVE-2026-47006](https://cve.now/CVE-2026-47006.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). (CVSS 7.2, Oracle Enterprise Manager Base Platform)
- [CVE-2026-47005](https://cve.now/CVE-2026-47005.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). (CVSS 7.2, Oracle Enterprise Manager Base Platform)
- [CVE-2026-47004](https://cve.now/CVE-2026-47004.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). (CVSS 8.8, Oracle Enterprise Manager Base Platform)
- [CVE-2026-47003](https://cve.now/CVE-2026-47003.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). (CVSS 5.9, Oracle Enterprise Manager Base Platform)
- [CVE-2026-47002](https://cve.now/CVE-2026-47002.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). (CVSS 6.1, Oracle Enterprise Manager Base Platform)
- [CVE-2026-47001](https://cve.now/CVE-2026-47001.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Web Services Framework). (CVSS 5.4, Oracle Enterprise Manager Base Platform)
- [CVE-2026-47000](https://cve.now/CVE-2026-47000.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). (CVSS 3.5, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46999](https://cve.now/CVE-2026-46999.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). (CVSS 7.0, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46998](https://cve.now/CVE-2026-46998.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). (CVSS 8.8, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46997](https://cve.now/CVE-2026-46997.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). (CVSS 6.5, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46996](https://cve.now/CVE-2026-46996.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). (CVSS 7.1, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46995](https://cve.now/CVE-2026-46995.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). (CVSS 8.8, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46994](https://cve.now/CVE-2026-46994.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 9.8, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46993](https://cve.now/CVE-2026-46993.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 8.2, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46992](https://cve.now/CVE-2026-46992.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 8.8, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46991](https://cve.now/CVE-2026-46991.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 4.4, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46990](https://cve.now/CVE-2026-46990.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). (CVSS 7.3, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46989](https://cve.now/CVE-2026-46989.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). (CVSS 9.1, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46988](https://cve.now/CVE-2026-46988.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). (CVSS 7.2, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46987](https://cve.now/CVE-2026-46987.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt (CVSS 7.7, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46986](https://cve.now/CVE-2026-46986.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 5.3, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46985](https://cve.now/CVE-2026-46985.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 5.3, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46984](https://cve.now/CVE-2026-46984.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 5.3, Oracle Enterprise Manager Base Platform)
- [CVE-2026-46983](https://cve.now/CVE-2026-46983.md): Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). (CVSS 9.8, Oracle Retail Integration Bus)
- [CVE-2026-46982](https://cve.now/CVE-2026-46982.md): Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). (CVSS 9.8, Oracle Retail Integration Bus)
- [CVE-2026-46981](https://cve.now/CVE-2026-46981.md): Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). (CVSS 7.2, Oracle Utilities Network Management System)
- [CVE-2026-46980](https://cve.now/CVE-2026-46980.md): Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). (CVSS 4.3, Oracle Utilities Network Management System)
- [CVE-2026-46975](https://cve.now/CVE-2026-46975.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 5.8, Oracle Database Server)
- [CVE-2026-46968](https://cve.now/CVE-2026-46968.md): Vulnerability in Oracle Java SE (component: JSSE). (CVSS 5.9, Oracle Java SE)
- [CVE-2026-46954](https://cve.now/CVE-2026-46954.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). (CVSS 7.2, Oracle Human Resources)
- [CVE-2026-46948](https://cve.now/CVE-2026-46948.md): Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Security). (CVSS 4.6, Oracle Utilities Network Management System)
- [CVE-2026-46943](https://cve.now/CVE-2026-46943.md): Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Plugin). (CVSS 7.4, Oracle Retail EFTLink)
- [CVE-2026-46941](https://cve.now/CVE-2026-46941.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). (CVSS 7.5, Oracle Cost Management)
- [CVE-2026-46936](https://cve.now/CVE-2026-46936.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster)
- [CVE-2026-46924](https://cve.now/CVE-2026-46924.md): Vulnerability in Oracle Application Testing Suite. (CVSS 9.8, Oracle Application Testing Suite)
- [CVE-2026-46923](https://cve.now/CVE-2026-46923.md): Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). (CVSS 8.0, Oracle Public Sector Financials)
- [CVE-2026-46917](https://cve.now/CVE-2026-46917.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1)
- [CVE-2026-46876](https://cve.now/CVE-2026-46876.md): Vulnerability in Oracle Application Testing Suite. (CVSS 9.8, Oracle Application Testing Suite)
- [CVE-2026-35290](https://cve.now/CVE-2026-35290.md): Vulnerability in Oracle Application Testing Suite. (CVSS 9.8, Oracle Application Testing Suite)
- [CVE-2026-35287](https://cve.now/CVE-2026-35287.md): Vulnerability in Oracle Application Testing Suite. (CVSS 7.5, Oracle Application Testing Suite)
- [CVE-2026-34316](https://cve.now/CVE-2026-34316.md): Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). (CVSS 6.1, Oracle Commerce Service Center)
- [CVE-2026-21954](https://cve.now/CVE-2026-21954.md): Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). (CVSS 4.3, Oracle Retail Xstore Point of Service)
- [CVE-2026-21953](https://cve.now/CVE-2026-21953.md): Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). (CVSS 3.3, Oracle Retail Xstore Point of Service)
- [CVE-2026-56745](https://cve.now/CVE-2026-56745.md): Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST\_STREAM Leads to Native Memory Exhaustion (CVSS 8.7, netty · io.netty:netty-codec-http)
- [CVE-2026-47709](https://cve.now/CVE-2026-47709.md): libheif has a NULL pointer dereference in heif\_image\_handle\_get\_image\_tiling for malformed unci image missing ispe (CVSS 6.9, strukturag libheif)
- [CVE-2026-65317](https://cve.now/CVE-2026-65317.md): Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass (CVSS 9.2, Weaviate Verba)
- [CVE-2026-10680](https://cve.now/CVE-2026-10680.md): Out-of-bounds access in Zephyr BR/EDR L2CAP configuration request handling via \`uint16\_t\` length underflow (CVSS 7.6, zephyrproject zephyr)
- [CVE-2026-10679](https://cve.now/CVE-2026-10679.md): Divide-by-zero in DesignWare SPI driver reachable from spi\_transceive syscall (local DoS) (CVSS 3.3, zephyrproject zephyr)
- [CVE-2026-10678](https://cve.now/CVE-2026-10678.md): NULL-pointer / out-of-bounds write in Zephyr MCTP I2C+GPIO target binding driven by an unauthenticated I2C controller (CVSS 8.1, zephyrproject zephyr)
- [CVE-2026-10677](https://cve.now/CVE-2026-10677.md): Kernel heap memory leak in \`z\_vrfy\_k\_poll()\` lets an unprivileged user thread exhaust the kernel resource pool (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-10675](https://cve.now/CVE-2026-10675.md): Bluetooth Mesh PB-ADV: invalidated provisioning link kept alive indefinitely, blocking (re)provisioning (DoS) (CVSS 4.3, zephyrproject zephyr)
- [CVE-2026-10674](https://cve.now/CVE-2026-10674.md): DoS (hard fault) in NXP LPUART driver: unsupported runtime UART config leaves clocks disabled (CVSS 5.5, zephyrproject zephyr)
- [CVE-2026-16484](https://cve.now/CVE-2026-16484.md): SourceCodester Class and Exam Timetabling System edit\_subjecta.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-43946](https://cve.now/CVE-2026-43946.md): FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue (CVSS 7.7, frangoteam FUXA · fuxa-server)
- [CVE-2026-43945](https://cve.now/CVE-2026-43945.md): FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection (CVSS 8.9, frangoteam FUXA · @frangoteam/fuxa)
- [CVE-2026-8989](https://cve.now/CVE-2026-8989.md): Open Recovery Mode (CVSS 8.6, Autel MaxiCharger Single)
- [CVE-2026-65316](https://cve.now/CVE-2026-65316.md): xxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCat (CVSS 7.1, xuxueli xxl-job)
- [CVE-2026-55851](https://cve.now/CVE-2026-55851.md): Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion (CVSS 8.7, netty · io.netty:netty-codec-haproxy)
- [CVE-2026-8988](https://cve.now/CVE-2026-8988.md): Access to Bootloader (CVSS 8.6, Autel MaxiCharger Single)
- [CVE-2026-47254](https://cve.now/CVE-2026-47254.md): libheif Has Heap Buffer Overflow in \`Track::get\_next\_sample\_raw\_data()\` -- OOB Chunk Vector Access (CVSS 6.1, strukturag libheif)
- [CVE-2026-47251](https://cve.now/CVE-2026-47251.md): libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec\_push\_data2 (CVSS 6.8, strukturag libheif)
- [CVE-2026-8987](https://cve.now/CVE-2026-8987.md): Authenticated Heap Overflow (CVSS 9.4, Autel MaxiCharger Single)
- [CVE-2026-65315](https://cve.now/CVE-2026-65315.md): Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser (CVSS 8.7, Ollama)
- [CVE-2026-47247](https://cve.now/CVE-2026-47247.md): libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation (CVSS 7.5, strukturag libheif)
- [CVE-2026-8986](https://cve.now/CVE-2026-8986.md): Command Injection via Malicious OCPP Server (CVSS 9.5, Autel MaxiCharger Single)
- [CVE-2026-8985](https://cve.now/CVE-2026-8985.md): Unauthenticated Command Injection (CVSS 10.0, Autel MaxiCharger Single)
- [CVE-2026-47178](https://cve.now/CVE-2026-47178.md): libheif has Heap Out Of Bounds Write in unci subsystem (CVSS 6.1, strukturag libheif)
- [CVE-2026-8984](https://cve.now/CVE-2026-8984.md): Unauthenticated RCE (CVSS 10.0, Autel MaxiCharger Single)
- [CVE-2026-63141](https://cve.now/CVE-2026-63141.md): Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions (CVSS 6.3, Elastic Kibana)
- [CVE-2026-65314](https://cve.now/CVE-2026-65314.md): Electric Postgres Sync Excluded-Column Value Inference via Subset Where Clauses (CVSS 5.3, ElectricSQL Electric Postgres Sync)
- [CVE-2026-47714](https://cve.now/CVE-2026-47714.md): libheif has integer overflow in inline mask size calculation that causes undersized buffer allocation (CVSS 6.1, strukturag libheif)
- [CVE-2026-63140](https://cve.now/CVE-2026-63140.md): Reachable Assertion in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-8983](https://cve.now/CVE-2026-8983.md): Backdoor Authentication Token (CVSS 10.0, Autel MaxiCharger Single)
- [CVE-2026-63080](https://cve.now/CVE-2026-63080.md): Aptabase SQL Injection via ClickHouse query backend (CVSS 7.1, aptabase)
- [CVE-2026-8982](https://cve.now/CVE-2026-8982.md): Hard-coded / Backdoor Accounts (CVSS 10.0, Autel MaxiCharger Single)
- [CVE-2026-45383](https://cve.now/CVE-2026-45383.md): libde265 has a heap buffer overflow (OOB read) in decode\_slice\_unit\_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 \<= v1.0.18 (CVSS 6.9, strukturag libde265)
- [CVE-2026-45382](https://cve.now/CVE-2026-45382.md): libde265 has a heap-buffer-overflow READ in decode\_slice\_unit\_tiles via unvalidated PPS tile geometry (CVSS 6.9, strukturag libde265)
- [CVE-2026-65057](https://cve.now/CVE-2026-65057.md): Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck (CVSS 9.2, keephq keep)
- [CVE-2026-47708](https://cve.now/CVE-2026-47708.md): MCP-for-Stata: Command injection via log\_file\_name parameter in Stata command wrapper (CVSS 9.3, SepineTam stata-mcp · stata-mcp)
- [CVE-2026-47697](https://cve.now/CVE-2026-47697.md): Shelf has cross-organization IDOR: authenticated users could read/attach another workspace's assets, tags, custodians, bookings, QR codes and audit data (CVSS 7.1, Shelf-nu shelf.nu)
- [CVE-2026-47695](https://cve.now/CVE-2026-47695.md): CC-Tweaked has an SSRF Protection Bypass with NAT64 (CVSS 7.1, CC-Tweaked · cc.tweaked:cc-tweaked-1.21-core +7)
- [CVE-2026-63092](https://cve.now/CVE-2026-63092.md): kirby-modules License Key Disclosure via modules/activate Dialog (CVSS 5.3, medienbaecker kirby-modules)
- [CVE-2026-47237](https://cve.now/CVE-2026-47237.md): Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing (CVSS 8.0, kubeflow community-distribution)
- [CVE-2026-65056](https://cve.now/CVE-2026-65056.md): mcp-webresearch Server-Side Request Forgery in visit\_page Due to Missing Internal-IP Filtering (CVSS 8.3, mzxrai mcp-webresearch)
- [CVE-2026-47690](https://cve.now/CVE-2026-47690.md): MeltanoHub vulnerable to command injection in the \`test\_dispatcher\` GitHub Actions workflow (CVSS 7.5, meltano hub)
- [CVE-2026-65055](https://cve.now/CVE-2026-65055.md): Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated filters\_data Endpoints (CVSS 6.9, taiga-back)
- [CVE-2026-44879](https://cve.now/CVE-2026-44879.md): Authenticated Command Injection allows arbitrary command execution in CLI Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway)
- [CVE-2026-47689](https://cve.now/CVE-2026-47689.md): FOGProject has stored XSS via unescaped inventory data in buildRow() rendered on Group Inventory tab (CVSS 4.6, fogproject)
- [CVE-2026-44878](https://cve.now/CVE-2026-44878.md): Authenticated Path Traversal allows Unauthorized Access in Web Interface (CVSS 7.2, Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway)
- [CVE-2026-47688](https://cve.now/CVE-2026-47688.md): FOGProject has unauthenticated clearAES and clearPMTasks that allow remote destruction of host encryption keys and power schedules (CVSS 8.2, fogproject)
- [CVE-2026-47687](https://cve.now/CVE-2026-47687.md): FOGProject has stored XSS via unescaped option label in selectForm() accessible from unauthenticated inventory endpoint (CVSS 7.3, fogproject)
- [CVE-2026-47685](https://cve.now/CVE-2026-47685.md): FOGProject has stored XSS via unauthenticated inventory service renders unescaped in Host Management page (CVSS 7.3, fogproject)
- [CVE-2026-63764](https://cve.now/CVE-2026-63764.md): LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass (CVSS 7.7, InternLM lmdeploy)
- [CVE-2026-63139](https://cve.now/CVE-2026-63139.md): Uncontrolled Resource Consumption in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-46556](https://cve.now/CVE-2026-46556.md): FlaskBB: SSRF in get\_image\_info() via unrestricted avatar URL (CVSS 6.5, flaskbb)
- [CVE-2026-64821](https://cve.now/CVE-2026-64821.md): djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views (CVSS 5.3, thiagopena djangoSIGE)
- [CVE-2026-65054](https://cve.now/CVE-2026-65054.md): MediaCMS Private Media Metadata Disclosure via Playlist Ownership Loophole (CVSS 8.2, MediaCMS)
- [CVE-2026-64822](https://cve.now/CVE-2026-64822.md): djangoSIGE 1.10 User Enumeration via ForgotPasswordView (CVSS 6.9, thiagopena djangoSIGE)
- [CVE-2026-12139](https://cve.now/CVE-2026-12139.md): Tanium addressed an information disclosure vulnerability in Connect. (CVSS 4.4, Tanium Connect)
- [CVE-2026-11925](https://cve.now/CVE-2026-11925.md): Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server. (CVSS 2.7, Tanium Server)
- [CVE-2026-63136](https://cve.now/CVE-2026-63136.md): Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-56147](https://cve.now/CVE-2026-56147.md): Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Information Disclosure and Case Attachment Integrity Compromise (CVSS 7.1, Elastic Kibana)
- [CVE-2026-16318](https://cve.now/CVE-2026-16318.md): QUIC Transport Parameters Memory Leak During HelloRetryRequest in s2n-tls (CVSS 5.3, Amazon s2n-tls)
- [CVE-2026-63358](https://cve.now/CVE-2026-63358.md): FileGator privilege escalation (CVSS 7.3, FileGator)
- [CVE-2026-65058](https://cve.now/CVE-2026-65058.md): Trezor Safe improper security check in on-device display (CVSS 5.3, Trezor Safe)
- [CVE-2026-16317](https://cve.now/CVE-2026-16317.md): Silent Drop of TLS 1.3 Encrypted Records in s2n-tls (CVSS 6.5, AWS s2n-tls)
- [CVE-2026-47143](https://cve.now/CVE-2026-47143.md): Capstone has a NULL Pointer Dereference with 3DNow! opcodes (CVSS 5.1, capstone-engine capstone · capstone)
- [CVE-2026-64881](https://cve.now/CVE-2026-64881.md): Command Injection (CVSS 8.8, Tenable Security Center)
- [CVE-2026-56146](https://cve.now/CVE-2026-56146.md): Improper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure (CVSS 5.4, Elastic Kibana)
- [CVE-2026-56145](https://cve.now/CVE-2026-56145.md): Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service (CVSS 6.5, Elasticsearch)
- [CVE-2026-64880](https://cve.now/CVE-2026-64880.md): Blind SQL Injection (CVSS 7.1, Tenable Security Center)
- [CVE-2026-47671](https://cve.now/CVE-2026-47671.md): Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets (CVSS 5.4, nhost cli · github.com/nhost/nhost)
- [CVE-2026-47667](https://cve.now/CVE-2026-47667.md): CImg Library: Uncontrolled Memory Allocation and Memory Leak in \`\_load\_analyze()\` via Crafted NIfTI/Analyze Header (CVSS 7.5, GreycLab CImg)
- [CVE-2026-64879](https://cve.now/CVE-2026-64879.md): Command Injection (CVSS 9.9, Tenable Security Center)
- [CVE-2026-46403](https://cve.now/CVE-2026-46403.md): Klever-Go KVM read-only execution can commit contract delete and upgrade side effects (CVSS 6.3, klever-io klever-go · github.com/klever-io/klever-go)
- [CVE-2026-56144](https://cve.now/CVE-2026-56144.md): Incorrect Authorization in Elasticsearch Leading to Information Disclosure (CVSS 5.3, Elasticsearch)
- [CVE-2026-64878](https://cve.now/CVE-2026-64878.md): Command Injection (CVSS 9.9, Tenable Security Center)
- [CVE-2026-42397](https://cve.now/CVE-2026-42397.md): Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5, Elastic Kibana)
- [CVE-2026-15957](https://cve.now/CVE-2026-15957.md): Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes (CVSS 7.5, aws-sdk-rust)
- [CVE-2026-49092](https://cve.now/CVE-2026-49092.md): Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Unauthorized Information Exposure (CVSS 4.3, Elastic Kibana)
- [CVE-2026-56852](https://cve.now/CVE-2026-56852.md): Infinite loop on invalid input in golang.org/x/text (CVSS 7.5, golang.org/x/text/unicode/norm · golang.org/x/text)
- [CVE-2026-46600](https://cve.now/CVE-2026-46600.md): Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage (CVSS 7.5, Go standard library net · golang.org/x/net/dns/dnsmessage +2)
- [CVE-2026-65069](https://cve.now/CVE-2026-65069.md): Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 4.0, EGOR Data::DisjointSet::Shared)
- [CVE-2026-65068](https://cve.now/CVE-2026-65068.md): Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.8, EGOR Data::SpatialHash::Shared)
- [CVE-2026-65067](https://cve.now/CVE-2026-65067.md): Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.8, EGOR Data::Intern::Shared)
- [CVE-2026-65066](https://cve.now/CVE-2026-65066.md): Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.8, EGOR Data::RingBuffer::Shared)
- [CVE-2026-65065](https://cve.now/CVE-2026-65065.md): Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 5.5, EGOR Data::RoaringBitmap::Shared)
- [CVE-2026-65064](https://cve.now/CVE-2026-65064.md): Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.8, EGOR Data::HashMap::Shared)
- [CVE-2026-65063](https://cve.now/CVE-2026-65063.md): Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.8, EGOR Data::RadixTree::Shared)
- [CVE-2026-65062](https://cve.now/CVE-2026-65062.md): Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.8, EGOR Data::SortedSet::Shared)
- [CVE-2026-65061](https://cve.now/CVE-2026-65061.md): Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.8, EGOR Data::ReqRep::Shared)
- [CVE-2026-64617](https://cve.now/CVE-2026-64617.md): Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.8, EGOR Data::PubSub::Shared)
- [CVE-2026-64616](https://cve.now/CVE-2026-64616.md): Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.3, EGOR Data::NDArray::Shared)
- [CVE-2026-64615](https://cve.now/CVE-2026-64615.md): Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.3, EGOR Data::Graph::Shared)
- [CVE-2026-64614](https://cve.now/CVE-2026-64614.md): Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without O\_EXCL or O\_NOFOLLOW (CVSS 3.8, EGOR Data::Deque::Shared)
- [CVE-2026-64613](https://cve.now/CVE-2026-64613.md): Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O\_NOFOLLOW (CVSS 6.2, EGOR Data::Buffer::Shared)
- [CVE-2026-59147](https://cve.now/CVE-2026-59147.md): Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu\_find (CVSS 9.8, EGOR Data::DisjointSet::Shared)
- [CVE-2026-59146](https://cve.now/CVE-2026-59146.md): Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucket, link and free-list indices in sph\_walk\_cell and sph\_alloc\_slot (CVSS 7.8, EGOR Data::SpatialHash::Shared)
- [CVE-2026-59145](https://cve.now/CVE-2026-59145.md): Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in si\_idx\_find (CVSS 9.1, EGOR Data::Intern::Shared)
- [CVE-2026-59144](https://cve.now/CVE-2026-59144.md): Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem\_size in ring\_read\_seq (CVSS 9.8, EGOR Data::RingBuffer::Shared)
- [CVE-2026-59143](https://cve.now/CVE-2026-59143.md): Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via an unvalidated container offset and cardinality in rb\_contains\_locked (CVSS 6.3, EGOR Data::RoaringBitmap::Shared)
- [CVE-2026-59142](https://cve.now/CVE-2026-59142.md): Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in shm\_str\_copy (CVSS 9.1, EGOR Data::HashMap::Shared)
- [CVE-2026-59141](https://cve.now/CVE-2026-59141.md): Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdx\_find\_locked (CVSS 9.1, EGOR Data::RadixTree::Shared)
- [CVE-2026-59140](https://cve.now/CVE-2026-59140.md): Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths (CVSS 9.1, EGOR Data::SortedSet::Shared)
- [CVE-2026-59139](https://cve.now/CVE-2026-59139.md): Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in reqrep\_recv\_locked (CVSS 9.1, EGOR Data::ReqRep::Shared)
- [CVE-2016-20096](https://cve.now/CVE-2016-20096.md): Linknat VOS3000/VOS2009 2.1.2.0 SQL Injection via login.jsp (CVSS 9.3, Kunshi Network Technology Co. Linknat VOS3000 · Kunshi Netw…)
- [CVE-2026-55082](https://cve.now/CVE-2026-55082.md): DHIS2 SQL injection in SQL View filter values (CVSS 8.7, dhis2-core)
- [CVE-2026-12548](https://cve.now/CVE-2026-12548.md): Libsoup: heap out-of-bounds read in libsoup due to integer truncation (CVSS 4.2, Red Hat Enterprise Linux)
- [CVE-2026-55081](https://cve.now/CVE-2026-55081.md): DHIS2 Reflected XSS in OpenAPI HTML scope parameter (CVSS 7.3, dhis2-core)
- [CVE-2026-12547](https://cve.now/CVE-2026-12547.md): Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch (CVSS 3.4, Red Hat Enterprise Linux)
- [CVE-2026-55084](https://cve.now/CVE-2026-55084.md): SQL Injection in SqlView Filter Parameter Leading to Arbitrary Database Read (CVSS 8.8, dhis2-core)
- [CVE-2026-16441](https://cve.now/CVE-2026-16441.md): Eclipse OpenJ9 : Method resolution default method precedence failure (CVSS 6.9, Eclipse Foundation OpenJ9)
- [CVE-2026-64877](https://cve.now/CVE-2026-64877.md): An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance (CVSS 8.4, Tenable Security Center)
- [CVE-2026-63454](https://cve.now/CVE-2026-63454.md): Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX (CVSS 7.2, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-63453](https://cve.now/CVE-2026-63453.md): Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX (CVSS 7.2, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-44880](https://cve.now/CVE-2026-44880.md): Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX (CVSS 8.8, Hewlett Packard Enterprise (HPE) AOS-CX)
- [CVE-2026-47657](https://cve.now/CVE-2026-47657.md): HumHub Missing Authorization on Remove All Space Members Action (CVSS 7.1, humhub)
- [CVE-2026-47425](https://cve.now/CVE-2026-47425.md): Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write) (CVSS 6.9, conda rattler · conda py-rattler +4)
- [CVE-2026-16243](https://cve.now/CVE-2026-16243.md): Eclipse OMR : arraycmp SIMD implementation does not check if the number of bytes to compare is zero (CVSS 5.7, Eclipse Foundation Eclipse OMR)
- [CVE-2026-56583](https://cve.now/CVE-2026-56583.md): HCL MyCloud was affected with Concurrent Login Vulnerability. (CVSS 3.1, HCLSoftware MyCloud)
- [CVE-2026-56582](https://cve.now/CVE-2026-56582.md): HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability. (CVSS 3.1, HCLSoftware MyCloud)
- [CVE-2026-56581](https://cve.now/CVE-2026-56581.md): HCL MyCloud was affected with Cookie Attribute Path Not Set (CVSS 2.6, HCLSoftware MyCloud)
- [CVE-2026-56580](https://cve.now/CVE-2026-56580.md): HCL MyCloud was affected by Using Components with Known Vulnerability (CVSS 2.2, HCLSoftware MyCloud)
- [CVE-2026-56579](https://cve.now/CVE-2026-56579.md): HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor. (CVSS 3.1, HCLSoftware MyCloud)
- [CVE-2026-56578](https://cve.now/CVE-2026-56578.md): HCL MyCloud was affected by Server Version Disclosure (CVSS 2.2, HCLSoftware MyCloud)
- [CVE-2026-56577](https://cve.now/CVE-2026-56577.md): HCL MyCloud affected by Weak Password Policy (CVSS 3.1, HCLSoftware MyCloud)
- [CVE-2026-47419](https://cve.now/CVE-2026-47419.md): praisonai-platform: Agent endpoints accept any agent\_id without workspace ownership check, cross-workspace read/update/delete IDOR (CVSS 8.3, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-16439](https://cve.now/CVE-2026-16439.md): Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow (CVSS 5.8, Eclipse Foundation OpenJ9)
- [CVE-2026-47418](https://cve.now/CVE-2026-47418.md): praisonai-platform: Project endpoints accept any project\_id without workspace ownership check, cross-workspace read/update/delete IDOR (CVSS 8.1, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-16493](https://cve.now/CVE-2026-16493.md): Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) (CVSS 7.8, Red Hat Satellite 6.17 for RHEL · Red Hat Satellite 6.18… +3)
- [CVE-2026-47417](https://cve.now/CVE-2026-47417.md): praisonai-platform: Comment endpoints accept any issue\_id without workspace ownership check, cross-workspace comment read and post IDOR (CVSS 8.1, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47416](https://cve.now/CVE-2026-47416.md): praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user\_id} (CVSS 9.6, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47415](https://cve.now/CVE-2026-47415.md): praisonai-platform: Issue endpoints accept any issue\_id without workspace ownership check, cross-workspace read/update/delete IDOR (CVSS 8.3, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47414](https://cve.now/CVE-2026-47414.md): praisonai-platform: Label endpoints accept any label\_id and any issue\_id without workspace ownership check, cross-workspace label edit/delete and issue-label-link IDOR (CVSS 7.6, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47413](https://cve.now/CVE-2026-47413.md): praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members (CVSS 9.6, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47412](https://cve.now/CVE-2026-47412.md): praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id} (CVSS 8.1, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47411](https://cve.now/CVE-2026-47411.md): praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id} (CVSS 6.5, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-21575](https://cve.now/CVE-2026-21575.md): This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windo (CVSS 7.1, Atlassian Sourcetree for Mac)
- [CVE-2026-21577](https://cve.now/CVE-2026-21577.md): This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 (CVSS 7.1, Atlassian Confluence Data Center)
- [CVE-2026-21579](https://cve.now/CVE-2026-21579.md): This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2 (CVSS 8.2, Atlassian Confluence Data Center)
- [CVE-2026-15724](https://cve.now/CVE-2026-15724.md): Path traversal in Progress ShareFile Storage Zones Controller (SZC) (CVSS 8.7, Progress ShareFile Storage Zones Controller)
- [CVE-2026-47410](https://cve.now/CVE-2026-47410.md): praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM\_ENV is unset (CVSS 9.8, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47409](https://cve.now/CVE-2026-47409.md): praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user\_id} (CVSS 8.1, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47408](https://cve.now/CVE-2026-47408.md): praisonai-platform: list\_issue\_activity returns activity log for any issue regardless of workspace ownership (CVSS 6.5, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-16451](https://cve.now/CVE-2026-16451.md): zsadmin2025 ZS-Admin com.zs.file.controller.SysFileController upload unrestricted upload (CVSS 5.3, zsadmin2025 ZS-Admin)
- [CVE-2026-15342](https://cve.now/CVE-2026-15342.md): CVE-2026-15342 (CVSS 6.5, Plane)
- [CVE-2026-47407](https://cve.now/CVE-2026-47407.md): PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation (CVSS 9.4, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-15432](https://cve.now/CVE-2026-15432.md): Observable Timing Discrepancy in Tink-Java and Tink-Android ChunkedMacVerification (CVSS 8.2, Google Tink-Java · Google Tink-Android)
- [CVE-2026-15829](https://cve.now/CVE-2026-15829.md): SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox (CVSS 8.6, MCP Toolbox for Databases)
- [CVE-2026-16454](https://cve.now/CVE-2026-16454.md): Privilege Escalation in Eclipse hawkBit DDI allows Tenant-Isolated Firmware Exfiltration (CVSS 4.3, Eclipse Foundation eclipse-hawkbit/hawkbit)
- [CVE-2026-47406](https://cve.now/CVE-2026-47406.md): praisonai-platform: Dependency endpoints accept any issue\_id and dep\_id without workspace ownership check, cross-workspace issue linking + read + delete IDOR (CVSS 8.1, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47405](https://cve.now/CVE-2026-47405.md): PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membership (CVSS 8.8, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-47399](https://cve.now/CVE-2026-47399.md): PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object ID (CVSS 8.8, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-15793](https://cve.now/CVE-2026-15793.md): Git source checkout from a bundle file could lead to command injection (CVSS 6.5, moby BuildKit)
- [CVE-2026-15792](https://cve.now/CVE-2026-15792.md): Possible panic when incorrect parameters sent from frontend (CVSS 6.3, moby BuildKit)
- [CVE-2026-15791](https://cve.now/CVE-2026-15791.md): LLB file operation can be tricked to remove /tmp directory contents (CVSS 3.3, moby BuildKit)
- [CVE-2026-15789](https://cve.now/CVE-2026-15789.md): Malicious client can bypass destination directory validation on local sources upload (CVSS 6.9, moby BuildKit)
- [CVE-2026-24232](https://cve.now/CVE-2026-24232.md): NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. (CVSS 4.3, NVIDIA Tranformers4Rec)
- [CVE-2026-44907](https://cve.now/CVE-2026-44907.md): A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lea (CVSS 7.5, Meta react-server-dom-turbopack · Meta react-server-dom-… +4)
- [CVE-2026-47398](https://cve.now/CVE-2026-47398.md): PraisonAI: Arbitrary code execution via unguarded \`spec.loader.exec\_module\` in \`agents\_generator.py\` - sibling of CVE-2026-44334 (CVSS 8.1, MervinPraison PraisonAI · praisonai)
- [CVE-2026-47397](https://cve.now/CVE-2026-47397.md): PraisonAI has an Arbitrary File Write in Python API (CVSS 7.1, MervinPraison PraisonAI · praisonai)
- [CVE-2026-47396](https://cve.now/CVE-2026-47396.md): PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL\_SERVER\_TOKEN is unset (CVSS 9.8, MervinPraison PraisonAI · praisonai)
- [CVE-2026-47395](https://cve.now/CVE-2026-47395.md): PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context (CVSS 5.5, MervinPraison PraisonAI · MervinPraison praisonaiagents +2)
- [CVE-2026-47394](https://cve.now/CVE-2026-47394.md): PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate (CVSS 8.7, MervinPraison PraisonAI · praisonai)
- [CVE-2026-64825](https://cve.now/CVE-2026-64825.md): Home Assistant Core \< 2026.6.0 Path Traversal File Write via Backup Upload (CVSS 9.0, home-assistant Home Assistant Core · homeassistant)
- [CVE-2026-64824](https://cve.now/CVE-2026-64824.md): Home Assistant Core \< 2026.7.0 Symlink Path Traversal RCE via backup-restore (CVSS 9.3, home-assistant Home Assistant Core · praisonai)
- [CVE-2026-28321](https://cve.now/CVE-2026-28321.md): SolarWinds Serv-U Broken Access Control Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28317](https://cve.now/CVE-2026-28317.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-47393](https://cve.now/CVE-2026-47393.md): PraisonAI \`deploy --type api\` emits a Flask server with authentication disabled by default (CVSS 9.8, MervinPraison PraisonAI · praisonai)
- [CVE-2026-28316](https://cve.now/CVE-2026-28316.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28315](https://cve.now/CVE-2026-28315.md): SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability (CVSS 6.2, SolarWinds Serv-U)
- [CVE-2026-28314](https://cve.now/CVE-2026-28314.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28313](https://cve.now/CVE-2026-28313.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28312](https://cve.now/CVE-2026-28312.md): SolarWinds Serv-U Privilege Escalation Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28310](https://cve.now/CVE-2026-28310.md): SolarWinds Serv-U Privilege Escalation Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28309](https://cve.now/CVE-2026-28309.md): SolarWinds Serv-U Broken Access Control Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28308](https://cve.now/CVE-2026-28308.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28307](https://cve.now/CVE-2026-28307.md): SolarWinds Serv-U Privilege Escalation Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28306](https://cve.now/CVE-2026-28306.md): SolarWinds Serv-U Privilege Escalation Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28305](https://cve.now/CVE-2026-28305.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28304](https://cve.now/CVE-2026-28304.md): SolarWinds Serv-U Remote Code Execution Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-28302](https://cve.now/CVE-2026-28302.md): SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability (CVSS 9.1, SolarWinds Serv-U)
- [CVE-2026-16450](https://cve.now/CVE-2026-16450.md): zsadmin2025 ZS-Admin MyBatis-Plus Tenant Plugin page getTenantId authorization (CVSS 5.3, zsadmin2025 ZS-Admin)
- [CVE-2026-47392](https://cve.now/CVE-2026-47392.md): PraisonAI vulnerable to sandbox escape via \`print.\_\_self\_\_\` builtins module leak in \`execute\_code\` (subprocess mode) (CVSS 9.9, MervinPraison PraisonAI · MervinPraison \< +2)
- [CVE-2026-47391](https://cve.now/CVE-2026-47391.md): PraisonAI's unauthenticated A2A official example can reach real LLM-driven \`eval()\` tool execution (CVSS 9.8, MervinPraison PraisonAI · praisonai)
- [CVE-2026-64823](https://cve.now/CVE-2026-64823.md): Home Assistant Core \< 2026.5.4 XSS via Shelly media\_player.py thumb URI (CVSS 2.1, home-assistant Home Assistant Core)
- [CVE-2026-56586](https://cve.now/CVE-2026-56586.md): HCL IEM was affected with X-Content-Type-Options Header Missing (CVSS 3.1, HCLSoftware IntelliOps Event Management)
- [CVE-2026-47390](https://cve.now/CVE-2026-47390.md): PraisonAI spider\_tools SSRF protection bypass via alternate loopback host encodings (CVSS 5.5, MervinPraison PraisonAI · MervinPraison praisonaiagents +2)
- [CVE-2026-56585](https://cve.now/CVE-2026-56585.md): HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing (CVSS 3.1, HCLSoftware IntelliOps Event Management)
- [CVE-2026-16449](https://cve.now/CVE-2026-16449.md): zsadmin2025 ZS-Admin com.zs.sys.dept.controller.SysDeptController page OrderItem.desc sql injection (CVSS 5.3, zsadmin2025 ZS-Admin)
- [CVE-2026-56587](https://cve.now/CVE-2026-56587.md): HCL IEM was affected with Strict transport security not enforced (CVSS 3.7, HCLSoftware IntelliOps Event Management)
- [CVE-2026-56584](https://cve.now/CVE-2026-56584.md): HCL IEM was affected with the Information disclosure nginx server (CVSS 3.7, HCLSoftware IntelliOps Event Management)
- [CVE-2026-65052](https://cve.now/CVE-2026-65052.md): Ninja Forms Calculation and Payment Total Tampering via Fail-Open get\_calc\_value in ListSelect and ListRadio Fields (CVSS 8.7, Saturday Drive Ninja Forms)
- [CVE-2026-65051](https://cve.now/CVE-2026-65051.md): Ninja Forms Server-Side Validation Bypass via Client-Controlled Field Metadata Merge in AJAX Submission Handler (CVSS 6.9, Saturday Drive Ninja Forms)
- [CVE-2026-65050](https://cve.now/CVE-2026-65050.md): Ninja Forms Missing Authorization in submissions-table Gutenberg Block Discloses Form Submissions to Unauthenticated Visitors (CVSS 7.1, Saturday Drive Ninja Forms)
- [CVE-2026-65049](https://cve.now/CVE-2026-65049.md): Ninja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf\_delete\_all\_data AJAX Action (CVSS 8.4, Saturday Drive Ninja Forms)
- [CVE-2026-59851](https://cve.now/CVE-2026-59851.md): Libssh: libssh: authentication bypass via missing gssapi principal check (CVSS 8.8, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-65048](https://cve.now/CVE-2026-65048.md): Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index (CVSS 9.3, Saturday Drive Ninja Forms)
- [CVE-2026-59850](https://cve.now/CVE-2026-59850.md): Libssh: libssh: use-after-free via data callbacks on closed channels (CVSS 4.3, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-16448](https://cve.now/CVE-2026-16448.md): D-Link DNS-1550-04 remote\_backup.cgi cgi\_check\_rsync\_rw command injection (CVSS 5.3, D-Link DNS-120 · D-Link DNR-202L +18)
- [CVE-2026-11876](https://cve.now/CVE-2026-11876.md): Missing Authorization in get\_deployed\_stack Endpoint in zenml-io/zenml (CVSS 5.0, zenml-io/zenml)
- [CVE-2026-59849](https://cve.now/CVE-2026-59849.md): Libssh: libssh: denial of service via automatic certificate authentication loop (CVSS 3.1, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-8933](https://cve.now/CVE-2026-8933.md): snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup (CVSS 7.8, snapd · Canonical Ubuntu 26.04 LTS +2)
- [CVE-2026-15226](https://cve.now/CVE-2026-15226.md): snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates (CVSS 8.4, snapd · Canonical Ubuntu 26.04 LTS +5)
- [CVE-2026-46681](https://cve.now/CVE-2026-46681.md): @nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty (CVSS 7.2, nevware21 ts-utils · @nevware21/ts-utils)
- [CVE-2024-5300](https://cve.now/CVE-2024-5300.md): AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd (CVSS 5.6, snapd · Canonical Ubuntu 26.04 LTS +5)
- [CVE-2026-47122](https://cve.now/CVE-2026-47122.md): Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection (CVSS 4.2, sparkle-project Sparkle)
- [CVE-2026-47121](https://cve.now/CVE-2026-47121.md): Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta (CVSS 6.1, sparkle-project Sparkle)
- [CVE-2026-16447](https://cve.now/CVE-2026-16447.md): D-Link DNS-320 multi\_uploadify.php unrestricted upload (CVSS 6.9, D-Link DNS-320)
- [CVE-2026-9499](https://cve.now/CVE-2026-9499.md): Out-of-bounds read in QTextCodec::codecForName() in Qt (CVSS 6.3, Qt)
- [CVE-2026-59848](https://cve.now/CVE-2026-59848.md): Libssh: libssh: denial of service via sftp responses with unknown request ids (CVSS 5.3, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-59847](https://cve.now/CVE-2026-59847.md): Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification (CVSS 5.9, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-59846](https://cve.now/CVE-2026-59846.md): Libssh: libssh: information disclosure via proxycommand %r username expansion (CVSS 3.9, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-16445](https://cve.now/CVE-2026-16445.md): Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module (CVSS 7.5, Red Hat Enterprise Linux · Red Hat OpenShift Container P… +1)
- [CVE-2026-16361](https://cve.now/CVE-2026-16361.md): Memory safety bugs fixed in Thunderbird ESR 140.13 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16360](https://cve.now/CVE-2026-16360.md): Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16412](https://cve.now/CVE-2026-16412.md): Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16411](https://cve.now/CVE-2026-16411.md): Memory safety bugs fixed in Thunderbird 153 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16410](https://cve.now/CVE-2026-16410.md): JIT miscompilation in the JavaScript Engine: JIT component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16409](https://cve.now/CVE-2026-16409.md): Invalid pointer in the Security: PSM component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16408](https://cve.now/CVE-2026-16408.md): Integer overflow in the Audio/Video: Playback component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16407](https://cve.now/CVE-2026-16407.md): Mitigation bypass in the DOM: Service Workers component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16406](https://cve.now/CVE-2026-16406.md): Mitigation bypass in the Networking component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16405](https://cve.now/CVE-2026-16405.md): Information disclosure in the Networking: WebSockets component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16404](https://cve.now/CVE-2026-16404.md): Spoofing issue in Firefox for Android (CVSS 7.4, Mozilla Firefox)
- [CVE-2026-16403](https://cve.now/CVE-2026-16403.md): Spoofing issue in the Address Bar component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16402](https://cve.now/CVE-2026-16402.md): Integer overflow in the Graphics: ImageLib component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16401](https://cve.now/CVE-2026-16401.md): Privilege escalation in the Data Loss Prevention component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16400](https://cve.now/CVE-2026-16400.md): Information disclosure in the DOM: Security component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16399](https://cve.now/CVE-2026-16399.md): Site isolation issue in the DOM: Navigation component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16398](https://cve.now/CVE-2026-16398.md): Site isolation issue in the Graphics component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16397](https://cve.now/CVE-2026-16397.md): Clickjacking issue in the WebExtensions component in Firefox for Android (CVSS 6.5, Mozilla Firefox)
- [CVE-2026-16396](https://cve.now/CVE-2026-16396.md): Privilege escalation in WebExtensions (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16395](https://cve.now/CVE-2026-16395.md): Integer overflow in the Audio/Video component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16394](https://cve.now/CVE-2026-16394.md): Mitigation bypass in the DOM: Security component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16359](https://cve.now/CVE-2026-16359.md): Incorrect boundary conditions in the Audio/Video: GMP component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16393](https://cve.now/CVE-2026-16393.md): Incorrect boundary conditions in the Graphics: WebGPU component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16392](https://cve.now/CVE-2026-16392.md): JIT miscompilation in the JavaScript Engine: JIT component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16391](https://cve.now/CVE-2026-16391.md): Information disclosure in the Storage: IndexedDB component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16390](https://cve.now/CVE-2026-16390.md): Mitigation bypass in the Enterprise Policies component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16389](https://cve.now/CVE-2026-16389.md): Incorrect boundary conditions, integer overflow in the Libraries component in NSS (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16388](https://cve.now/CVE-2026-16388.md): Sandbox escape in the DOM: Networking component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16387](https://cve.now/CVE-2026-16387.md): Site isolation issue in the Networking component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16386](https://cve.now/CVE-2026-16386.md): Information disclosure due to uninitialized memory in the Graphics: WebGPU component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16385](https://cve.now/CVE-2026-16385.md): Information disclosure due to uninitialized memory in the Graphics: WebGPU component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16384](https://cve.now/CVE-2026-16384.md): Information disclosure due to uninitialized memory in the Graphics: WebGPU component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16383](https://cve.now/CVE-2026-16383.md): Mitigation bypass in the DOM: Networking component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16382](https://cve.now/CVE-2026-16382.md): Mitigation bypass in the DOM: Service Workers component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16381](https://cve.now/CVE-2026-16381.md): Same-origin policy bypass in the Networking: DNS component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16380](https://cve.now/CVE-2026-16380.md): Mitigation bypass in the Networking component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16358](https://cve.now/CVE-2026-16358.md): Site isolation issue in the Graphics: WebRender component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16379](https://cve.now/CVE-2026-16379.md): Privilege escalation in the DOM: Content Processes component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16378](https://cve.now/CVE-2026-16378.md): Other issue in the DOM: Copy & Paste and Drag & Drop component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16377](https://cve.now/CVE-2026-16377.md): Mitigation bypass in the PDF Viewer component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16376](https://cve.now/CVE-2026-16376.md): Denial-of-service in the Graphics: WebGPU component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16375](https://cve.now/CVE-2026-16375.md): Site isolation issue in the Networking: HTTP component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16374](https://cve.now/CVE-2026-16374.md): Information disclosure in the Framework component in DevTools (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16373](https://cve.now/CVE-2026-16373.md): Information disclosure in the Privacy component in Firefox for Android (CVSS 7.5, Mozilla Firefox)
- [CVE-2026-16372](https://cve.now/CVE-2026-16372.md): Privilege escalation in the DOM: Content Processes component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16371](https://cve.now/CVE-2026-16371.md): Privilege escalation in the DOM: Navigation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16370](https://cve.now/CVE-2026-16370.md): Mitigation bypass in the DOM: Networking component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16357](https://cve.now/CVE-2026-16357.md): Incorrect boundary conditions in the Graphics component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16356](https://cve.now/CVE-2026-16356.md): Sandbox escape due to use-after-free in the Disability Access APIs component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16355](https://cve.now/CVE-2026-16355.md): JIT miscompilation in the JavaScript Engine: JIT component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16369](https://cve.now/CVE-2026-16369.md): Integer overflow in the JavaScript: WebAssembly component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16368](https://cve.now/CVE-2026-16368.md): Incorrect boundary conditions in the JavaScript: WebAssembly component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16367](https://cve.now/CVE-2026-16367.md): Sandbox escape due to invalid pointer in the Disability Access APIs component (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16354](https://cve.now/CVE-2026-16354.md): Information disclosure in the Graphics: ImageLib component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16353](https://cve.now/CVE-2026-16353.md): Invalid pointer in the DOM: Bindings (WebIDL) component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16366](https://cve.now/CVE-2026-16366.md): Privilege escalation in the DOM: Navigation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16365](https://cve.now/CVE-2026-16365.md): Privilege escalation in the DOM: Workers component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16364](https://cve.now/CVE-2026-16364.md): Incorrect boundary conditions in the Audio/Video: Playback component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16363](https://cve.now/CVE-2026-16363.md): JIT miscompilation in the JavaScript: WebAssembly component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16352](https://cve.now/CVE-2026-16352.md): Sandbox escape due to use-after-free in the Disability Access APIs component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16351](https://cve.now/CVE-2026-16351.md): Sandbox escape due to use-after-free in the DOM: Navigation component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16362](https://cve.now/CVE-2026-16362.md): Use-after-free in the WebRTC: Audio/Video component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16350](https://cve.now/CVE-2026-16350.md): Incorrect boundary conditions in the Audio/Video: cubeb component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-16349](https://cve.now/CVE-2026-16349.md): Same-origin policy bypass in the DOM: Navigation component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-6792](https://cve.now/CVE-2026-6792.md): Improper Authorization in Universal Sotware's FlexCity (CVSS 6.5, Universal Software FlexCity)
- [CVE-2026-8285](https://cve.now/CVE-2026-8285.md): OTP Bypass in Universal Sotware's FlexCity (CVSS 4.3, Universal Software FlexCity)
- [CVE-2026-8284](https://cve.now/CVE-2026-8284.md): Open Redirect in Universal Sotware's FlexCity (CVSS 6.1, Universal Software FlexCity)
- [CVE-2026-16461](https://cve.now/CVE-2026-16461.md): Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (CVSS 6.5, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-65009](https://cve.now/CVE-2026-65009.md): OpenRemote before 1.26.2 Information Disclosure via Syslog REST API (CVSS 5.3, openremote)
- [CVE-2026-65008](https://cve.now/CVE-2026-65008.md): Grav before 2.0.7 Remote Code Execution via Blueprint dynamicData (CVSS 9.3, getgrav grav · getgrav/grav)
- [CVE-2026-65007](https://cve.now/CVE-2026-65007.md): Grav before 1.0.8 Missing Authorization on API Key Generation (CVSS 8.7, getgrav grav)
- [CVE-2026-64628](https://cve.now/CVE-2026-64628.md): Grav Stored Cross-Site Scripting via Shortcode Attribute Handlers (CVSS 5.1, getgrav grav)
- [CVE-2026-64627](https://cve.now/CVE-2026-64627.md): Parse Server 9.0.0 Schema Disclosure via GraphQL Variable Coercion (CVSS 6.9, parse-community parse-server)
- [CVE-2026-59844](https://cve.now/CVE-2026-59844.md): Libssh: libssh: denial of service via oversized sftp read length (CVSS 6.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-59845](https://cve.now/CVE-2026-59845.md): Libssh: libssh: denial of service via unchecked proxycommand fork() failure (CVSS 5.3, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-59843](https://cve.now/CVE-2026-59843.md): Libssh: libssh: denial of service via zero advertised channel packet size (CVSS 6.5, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-59842](https://cve.now/CVE-2026-59842.md): Libssh: libssh: information disclosure via short gssapi curve25519 public key (CVSS 3.7, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-1617](https://cve.now/CVE-2026-1617.md): SQLi in Turkmesh's Turkhotspot 5651 Loglama (CVSS 9.8, Turkmesh Communication Services Turkhotspot 5651 Loglama)
- [CVE-2026-60080](https://cve.now/CVE-2026-60080.md): Apache Fory: Rust MetaString heap use-after-free (CVSS 7.3, Apache Software Foundation Apache Fory)
- [CVE-2026-64606](https://cve.now/CVE-2026-64606.md): Apache Fory, Apache Fory: Class-registration bypass through an auto-admitted SerializedLambda capturing interface (CVSS 9.8, Apache Software Foundation Apache Fory)
- [CVE-2026-64609](https://cve.now/CVE-2026-64609.md): Apache Fory, Apache Fory: Out-of-Bounds Read via sun.misc.Unsafe in zero-copy java deserialization (CVSS 9.1, Apache Software Foundation Apache Fory)
- [CVE-2026-64608](https://cve.now/CVE-2026-64608.md): Apache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths (CVSS 9.8, Apache Software Foundation Apache Fory)
- [CVE-2026-62415](https://cve.now/CVE-2026-62415.md): Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro \< 4.6.2 (CVSS 9.1, joomdonation.com Membership Pro extension for Joomla)
- [CVE-2026-15370](https://cve.now/CVE-2026-15370.md): Libssh: libssh: stack buffer overflow in sftp server longname construction (CVSS 6.7, Red Hat Enterprise Linux · Red Hat Hardened Images)
- [CVE-2026-1771](https://cve.now/CVE-2026-1771.md): MapSVG \<= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint (CVSS 7.2, oyatek MapSVG – Vector maps, Image maps, Google Maps)
- [CVE-2026-1372](https://cve.now/CVE-2026-1372.md): Tutor LMS Elementor Addons \<= 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Tutor LMS and Elementor Plugin Activation (CVSS 4.3, themeum Tutor LMS Elementor Addons)
- [CVE-2026-15145](https://cve.now/CVE-2026-15145.md): Essential Addons for Elementor \<= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2026-8593](https://cve.now/CVE-2026-8593.md): Fix Business Intelligence API Pack permission (CVSS 5.3, Checkmk)
- [CVE-2026-3183](https://cve.now/CVE-2026-3183.md): Multi Factor Auth Bypass (CVSS 7.1, Zohocorp ManageEngine ADSelfService Plus)
- [CVE-2026-8082](https://cve.now/CVE-2026-8082.md): Bpost Shipping Platform \< 3.2.3 - Unauthenticated SQL Injection (CVSS 7.5, bpost-shipping-platform)
- [CVE-2026-14185](https://cve.now/CVE-2026-14185.md): WPBot AI ChatBot \< 8.2.0 - Subscriber+ RAG Settings Update (CVSS 4.3, WPBot)
- [CVE-2026-14184](https://cve.now/CVE-2026-14184.md): Academy LMS \< 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR (CVSS 5.4, Academy LMS)
- [CVE-2026-14183](https://cve.now/CVE-2026-14183.md): Classified Listing \< 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR (CVSS 4.3, Classified Listing)
- [CVE-2026-13694](https://cve.now/CVE-2026-13694.md): Bit Form \< 3.1.0 - Unauthenticated Workflow Trigger via Authentication Bypass (CVSS 6.5, Bit Form)
- [CVE-2026-13693](https://cve.now/CVE-2026-13693.md): Bit Form \< 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal (CVSS 5.9, Bit Form)
- [CVE-2026-11767](https://cve.now/CVE-2026-11767.md): CRT Addons for Elementor \< 1.6.7 - Unauthenticated Stored XSS via Contact Form (CVSS 8.8, Free Theme Builder for Elementor)
- [CVE-2026-13439](https://cve.now/CVE-2026-13439.md): Easy Form Builder by WhiteStudio \<= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint (CVSS 9.8, hassantafreshi Easy Form Builder by WhiteStudio – Drag & Dr…)
- [CVE-2026-15782](https://cve.now/CVE-2026-15782.md): WPForms \<= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content (CVSS 4.9, smub WPForms – AI Form Builder for WordPress – Contact Form…)
- [CVE-2026-3182](https://cve.now/CVE-2026-3182.md): Sensitive Data Exposure (CVSS 4.3, Zohocorp ManageEngine Endpoint Central)
- [CVE-2026-15811](https://cve.now/CVE-2026-15811.md): Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes (CVSS 5.8, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2026-15812](https://cve.now/CVE-2026-15812.md): Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links (CVSS 4.8, Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…)
- [CVE-2023-37507](https://cve.now/CVE-2023-37507.md): An information disclosure vulnerability affects HCL DevOps Plan (CVSS 6.9, HCLSoftware DevOps Plan)
- [CVE-2026-16266](https://cve.now/CVE-2026-16266.md): Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey() function in util.js. (CVSS 6.3, mongo-object)
- [CVE-2026-15927](https://cve.now/CVE-2026-15927.md): Quay: mirror-registry: ssrf: repo-level mirror accepts external\_reference without url validation (CVSS 6.8, Red Hat Quay · mirror registry for Red Hat OpenShift)
- [CVE-2023-37508](https://cve.now/CVE-2023-37508.md): HCL DevOps Plan is susceptible to a Cross-Site Scripting (XSS) vulnerability (CVSS 2.3, HCLSoftware DevOps Plan)
- [CVE-2026-15156](https://cve.now/CVE-2026-15156.md): Essential Addons for Elementor \<= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2026-59776](https://cve.now/CVE-2026-59776.md): Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017. (CVSS 6.8, Sony FeliCa IC chips)
- [CVE-2026-16336](https://cve.now/CVE-2026-16336.md): trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect (CVSS 5.3, trinodb trino)
- [CVE-2026-16334](https://cve.now/CVE-2026-16334.md): itsourcecode Hospital Management System prescriptionorder.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-6952](https://cve.now/CVE-2026-6952.md): A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions (CVSS 7.2, Zyxel AX7501-B1 firmware)
- [CVE-2026-63729](https://cve.now/CVE-2026-63729.md): TeX Live SyncTeX Parser Heap Use-After-Free via Malformed SyncTeX File (CVSS 6.8, TeX Live)
- [CVE-2026-16332](https://cve.now/CVE-2026-16332.md): D-Link DNS-320 multi\_uploadify.php unrestricted upload (CVSS 6.9, D-Link DNS-320)
- [CVE-2026-16331](https://cve.now/CVE-2026-16331.md): D-Link DNS-320 save\_ajax.php unrestricted upload (CVSS 6.9, D-Link DNS-320)
- [CVE-2026-16330](https://cve.now/CVE-2026-16330.md): D-Link DNS-320 uploadify.php unrestricted upload (CVSS 6.9, D-Link DNS-320)
- [CVE-2026-16329](https://cve.now/CVE-2026-16329.md): D-Link DNS-320 uploadify.php unrestricted upload (CVSS 6.9, D-Link DNS-320)
- [CVE-2025-66390](https://cve.now/CVE-2025-66390.md): In Microsoft Azure API Management through 2025-10-17, when self-service signup (username/password Basic Authentication) is enabled in Tenant (CVSS 9.8)
- [CVE-2025-68640](https://cve.now/CVE-2025-68640.md): The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET (Private Endpoint Token) to enumerate d (CVSS 5.3)
- [CVE-2026-30631](https://cve.now/CVE-2026-30631.md): An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrar (CVSS 9.8)
- [CVE-2026-30632](https://cve.now/CVE-2026-30632.md): Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the create\_doc tool. (CVSS 7.5)
- [CVE-2026-30633](https://cve.now/CVE-2026-30633.md): Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get\_doc and update\_doc tools. (CVSS 7.5)
- [CVE-2026-50755](https://cve.now/CVE-2026-50755.md): An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value (CVSS 9.8)
- [CVE-2026-50756](https://cve.now/CVE-2026-50756.md): An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component (CVSS 7.5)
- [CVE-2026-50757](https://cve.now/CVE-2026-50757.md): Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-dra (CVSS 7.8)
- [CVE-2026-50758](https://cve.now/CVE-2026-50758.md): Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp para (CVSS 8.1)
- [CVE-2026-50759](https://cve.now/CVE-2026-50759.md): An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE /instance/{instance\_id} end (CVSS 7.5)
- [CVE-2026-52469](https://cve.now/CVE-2026-52469.md): SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the DeviceInfoMapper.xml file (CVSS 9.8)
- [CVE-2026-52470](https://cve.now/CVE-2026-52470.md): SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file (CVSS 9.8)
- [CVE-2026-52472](https://cve.now/CVE-2026-52472.md): SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file (CVSS 9.8)
- [CVE-2026-52474](https://cve.now/CVE-2026-52474.md): An issue in aiflowy \<= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUtil.java file. (CVSS 7.5)
- [CVE-2026-52475](https://cve.now/CVE-2026-52475.md): Cross Site Scripting vulnerability in aiflowy \<= 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.jav (CVSS 6.1)
- [CVE-2026-52476](https://cve.now/CVE-2026-52476.md): SQL Injection vulnerability in aiflowy \<= 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the D (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-07-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.