# CVEs published 2026-08-18

1,405 CVEs were published on August 18, 2026: 225 critical, 736 high. Days are UTC.

- [CVE-2026-75976](https://cve.now/CVE-2026-75976.md): TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow (CVSS 9.4, TRENDnet TEW-823DRU)
- [CVE-2025-11729](https://cve.now/CVE-2025-11729.md): PPWP: Password Protect Pages, Posts & Full or Partial Content \<= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure (CVSS 4.3, buildwps PPWP – Password Protect Pages)
- [CVE-2026-27365](https://cve.now/CVE-2026-27365.md): WordPress PublishPress Series plugin \<= 2.17.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, PublishPress Series)
- [CVE-2026-66589](https://cve.now/CVE-2026-66589.md): WordPress B2BKing plugin \<= 5.2.30 - Broken Access Control vulnerability (CVSS 5.4, Kings Plugins B2BKing)
- [CVE-2026-66591](https://cve.now/CVE-2026-66591.md): WordPress Media LIbrary Assistant plugin \<= 3.39 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, David Lingren Media LIbrary Assistant)
- [CVE-2026-66602](https://cve.now/CVE-2026-66602.md): WordPress HashBar – WordPress Notification Bar plugin \<= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, DevItems HashBar – WordPress Notification Bar)
- [CVE-2026-66603](https://cve.now/CVE-2026-66603.md): WordPress Draft List plugin \<= 2.6.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, David Artiss Draft List)
- [CVE-2026-21584](https://cve.now/CVE-2026-21584.md): This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bam (CVSS 7.6, Atlassian Bamboo Data Center)
- [CVE-2026-21582](https://cve.now/CVE-2026-21582.md): This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 o (CVSS 8.8, Atlassian Crowd Data Center)
- [CVE-2026-21580](https://cve.now/CVE-2026-21580.md): This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7. (CVSS 8.6, Atlassian Confluence Data Center · Atlassian Confluence Ser…)
- [CVE-2026-53959](https://cve.now/CVE-2026-53959.md): 4gaBoards: Mass Information Disclosure (Internal PII Leakage) on /api/users to any authenticated user (CVSS 6.5, RARgames 4gaBoards)
- [CVE-2026-53958](https://cve.now/CVE-2026-53958.md): 4gaBoards: SSO Pre-Account Takeover / Hijacking via Mass Assignment (CVSS 7.6, RARgames 4gaBoards)
- [CVE-2026-50186](https://cve.now/CVE-2026-50186.md): 4gaBoards: Path Traversal leading to Arbitrary File Read and Deletion in Board Export (CVSS 8.8, RARgames 4gaBoards)
- [CVE-2026-50191](https://cve.now/CVE-2026-50191.md): 4gaBoards: Pre-Account Takeover via SSO Email Linkage (CVSS 8.8, RARgames 4gaBoards)
- [CVE-2026-52854](https://cve.now/CVE-2026-52854.md): mediawiki/maps: Stored XSS through the overlays parameter in the display\_map parser function (CVSS 8.6, ProfessionalWiki Maps · mediawiki/maps)
- [CVE-2026-52875](https://cve.now/CVE-2026-52875.md): Streambert: Arbitrary Directory Creation and File Manipulation via Backup Handler (CVSS 8.4, truelockmc streambert)
- [CVE-2026-52876](https://cve.now/CVE-2026-52876.md): Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback (CVSS 8.8, truelockmc streambert)
- [CVE-2026-52873](https://cve.now/CVE-2026-52873.md): Streambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained XSS in Electron Renderer (CVSS 6.9, truelockmc streambert)
- [CVE-2026-52877](https://cve.now/CVE-2026-52877.md): Streambert : Insecure Protocol Execution in open-external IPC Handler (CVSS 8.3, truelockmc streambert)
- [CVE-2026-52872](https://cve.now/CVE-2026-52872.md): Streambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol (CVSS 8.8, truelockmc streambert)
- [CVE-2026-15316](https://cve.now/CVE-2026-15316.md): Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200 (CVSS 7.1, TP-Link Systems Tapo C200)
- [CVE-2026-15315](https://cve.now/CVE-2026-15315.md): Unauthenticated Administrative Authentication Bypass via device\_confirm Replay in TP-Link Tapo C120 and C200 (CVSS 8.7, TP-Link Systems Tapo C200 · TP-Link Systems Tapo C120)
- [CVE-2026-47699](https://cve.now/CVE-2026-47699.md): Confidential Containers Guest Components image-rs: zip-slip-class arbitrary file write via absolute entry path in hardlink fallback (CVSS 6.4, confidential-containers guest-components)
- [CVE-2026-62377](https://cve.now/CVE-2026-62377.md): libheif: Reachable assertion in HeifContext::get\_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110) (CVSS 4.3, strukturag libheif)
- [CVE-2026-62291](https://cve.now/CVE-2026-62291.md): libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions (CVSS 5.3, strukturag libheif)
- [CVE-2026-62292](https://cve.now/CVE-2026-62292.md): libheif: Out-of-bounds read in uncompressed unci tile range slicing (CVSS 8.7, strukturag libheif)
- [CVE-2026-62289](https://cve.now/CVE-2026-62289.md): libheif: Integer underflow in Fraction constructor via double clap transform application (CVSS 4.3, strukturag libheif)
- [CVE-2026-50142](https://cve.now/CVE-2026-50142.md): libheif: unbounded heap allocation in HEIF sequence parser (stsz fixed-size mode missing bound check) (CVSS 7.5, strukturag libheif)
- [CVE-2026-48796](https://cve.now/CVE-2026-48796.md): CefSharp: \`FolderSchemeHandlerFactory\` path boundary check can expose files outside the configured root folder (CVSS 5.3, CefSharp · CefSharp.Common)
- [CVE-2026-73974](https://cve.now/CVE-2026-73974.md): linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE) (CVSS 5.5, Linuxfabrik monitoring-plugins · Linuxfabrik lib +1)
- [CVE-2026-73973](https://cve.now/CVE-2026-73973.md): Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE) (CVSS 5.5, Linuxfabrik monitoring-plugins)
- [CVE-2026-41921](https://cve.now/CVE-2026-41921.md): Koha Stored XSS via Purchase Suggestion Handler (CVSS 5.1, Koha Community Koha)
- [CVE-2026-73939](https://cve.now/CVE-2026-73939.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.6, Oracle Helidon)
- [CVE-2026-73938](https://cve.now/CVE-2026-73938.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73937](https://cve.now/CVE-2026-73937.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.2, Oracle Helidon)
- [CVE-2026-73936](https://cve.now/CVE-2026-73936.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73935](https://cve.now/CVE-2026-73935.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73934](https://cve.now/CVE-2026-73934.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73933](https://cve.now/CVE-2026-73933.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.3, Oracle Helidon)
- [CVE-2026-73932](https://cve.now/CVE-2026-73932.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73931](https://cve.now/CVE-2026-73931.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.3, Oracle Helidon)
- [CVE-2026-73930](https://cve.now/CVE-2026-73930.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.9, Oracle Helidon)
- [CVE-2026-73929](https://cve.now/CVE-2026-73929.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.3, Oracle Helidon)
- [CVE-2026-73928](https://cve.now/CVE-2026-73928.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73927](https://cve.now/CVE-2026-73927.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73925](https://cve.now/CVE-2026-73925.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.2, Oracle Helidon)
- [CVE-2026-73924](https://cve.now/CVE-2026-73924.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73923](https://cve.now/CVE-2026-73923.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 3.7, Oracle Helidon)
- [CVE-2026-73922](https://cve.now/CVE-2026-73922.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73921](https://cve.now/CVE-2026-73921.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-73920](https://cve.now/CVE-2026-73920.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.4, Oracle Helidon)
- [CVE-2026-73919](https://cve.now/CVE-2026-73919.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73918](https://cve.now/CVE-2026-73918.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.3, Oracle Helidon)
- [CVE-2026-73917](https://cve.now/CVE-2026-73917.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73916](https://cve.now/CVE-2026-73916.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73915](https://cve.now/CVE-2026-73915.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73914](https://cve.now/CVE-2026-73914.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73913](https://cve.now/CVE-2026-73913.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73912](https://cve.now/CVE-2026-73912.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-73911](https://cve.now/CVE-2026-73911.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73910](https://cve.now/CVE-2026-73910.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73909](https://cve.now/CVE-2026-73909.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.9, Oracle Helidon)
- [CVE-2026-73908](https://cve.now/CVE-2026-73908.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73907](https://cve.now/CVE-2026-73907.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73906](https://cve.now/CVE-2026-73906.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73905](https://cve.now/CVE-2026-73905.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-73904](https://cve.now/CVE-2026-73904.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73903](https://cve.now/CVE-2026-73903.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73902](https://cve.now/CVE-2026-73902.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73901](https://cve.now/CVE-2026-73901.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 4.8, Oracle Helidon)
- [CVE-2026-73900](https://cve.now/CVE-2026-73900.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73899](https://cve.now/CVE-2026-73899.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73898](https://cve.now/CVE-2026-73898.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-73897](https://cve.now/CVE-2026-73897.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73896](https://cve.now/CVE-2026-73896.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73895](https://cve.now/CVE-2026-73895.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73894](https://cve.now/CVE-2026-73894.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.3, Oracle Helidon)
- [CVE-2026-73893](https://cve.now/CVE-2026-73893.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73892](https://cve.now/CVE-2026-73892.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73891](https://cve.now/CVE-2026-73891.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.3, Oracle Helidon)
- [CVE-2026-73890](https://cve.now/CVE-2026-73890.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73889](https://cve.now/CVE-2026-73889.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73888](https://cve.now/CVE-2026-73888.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73887](https://cve.now/CVE-2026-73887.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73886](https://cve.now/CVE-2026-73886.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73885](https://cve.now/CVE-2026-73885.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73884](https://cve.now/CVE-2026-73884.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73883](https://cve.now/CVE-2026-73883.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73882](https://cve.now/CVE-2026-73882.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73881](https://cve.now/CVE-2026-73881.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73880](https://cve.now/CVE-2026-73880.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 4.4, Oracle Helidon)
- [CVE-2026-73879](https://cve.now/CVE-2026-73879.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73878](https://cve.now/CVE-2026-73878.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-73877](https://cve.now/CVE-2026-73877.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73876](https://cve.now/CVE-2026-73876.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73875](https://cve.now/CVE-2026-73875.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.2, Oracle Helidon)
- [CVE-2026-73874](https://cve.now/CVE-2026-73874.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-73873](https://cve.now/CVE-2026-73873.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 4.2, Oracle Helidon)
- [CVE-2026-73872](https://cve.now/CVE-2026-73872.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73871](https://cve.now/CVE-2026-73871.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-73870](https://cve.now/CVE-2026-73870.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-73869](https://cve.now/CVE-2026-73869.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-73868](https://cve.now/CVE-2026-73868.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73867](https://cve.now/CVE-2026-73867.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-73866](https://cve.now/CVE-2026-73866.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-73865](https://cve.now/CVE-2026-73865.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.1, Oracle Helidon)
- [CVE-2026-71167](https://cve.now/CVE-2026-71167.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.4, Oracle Helidon)
- [CVE-2026-71166](https://cve.now/CVE-2026-71166.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.4, Oracle Helidon)
- [CVE-2026-71165](https://cve.now/CVE-2026-71165.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.4, Oracle Helidon)
- [CVE-2026-71164](https://cve.now/CVE-2026-71164.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-71162](https://cve.now/CVE-2026-71162.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.5, Oracle Helidon)
- [CVE-2026-71161](https://cve.now/CVE-2026-71161.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-71160](https://cve.now/CVE-2026-71160.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-71159](https://cve.now/CVE-2026-71159.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.2, Oracle Helidon)
- [CVE-2026-71158](https://cve.now/CVE-2026-71158.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-71157](https://cve.now/CVE-2026-71157.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-71156](https://cve.now/CVE-2026-71156.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-71155](https://cve.now/CVE-2026-71155.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.5, Oracle Helidon)
- [CVE-2026-71154](https://cve.now/CVE-2026-71154.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-71153](https://cve.now/CVE-2026-71153.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-71152](https://cve.now/CVE-2026-71152.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-71151](https://cve.now/CVE-2026-71151.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.6, Oracle VM VirtualBox)
- [CVE-2026-71150](https://cve.now/CVE-2026-71150.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-71149](https://cve.now/CVE-2026-71149.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.2, Oracle Hyperion Financial Management)
- [CVE-2026-71148](https://cve.now/CVE-2026-71148.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-71147](https://cve.now/CVE-2026-71147.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.2, Oracle Hyperion Financial Management)
- [CVE-2026-71146](https://cve.now/CVE-2026-71146.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 1.9, Oracle Hyperion Financial Management)
- [CVE-2026-71145](https://cve.now/CVE-2026-71145.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.4, Oracle Hyperion Financial Management)
- [CVE-2026-71144](https://cve.now/CVE-2026-71144.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.0, Oracle Hyperion Financial Management)
- [CVE-2026-71143](https://cve.now/CVE-2026-71143.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Third Party). (CVSS 7.4, Oracle Communications Unified Inventory Management)
- [CVE-2026-71142](https://cve.now/CVE-2026-71142.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security Component). (CVSS 7.5, Oracle Communications Unified Inventory Management)
- [CVE-2026-71141](https://cve.now/CVE-2026-71141.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.7, Oracle VM VirtualBox)
- [CVE-2026-71140](https://cve.now/CVE-2026-71140.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.4, Oracle VM VirtualBox)
- [CVE-2026-71139](https://cve.now/CVE-2026-71139.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 4.4, Oracle VM VirtualBox)
- [CVE-2026-71138](https://cve.now/CVE-2026-71138.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.3, Oracle VM VirtualBox)
- [CVE-2026-71137](https://cve.now/CVE-2026-71137.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71136](https://cve.now/CVE-2026-71136.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.3, Oracle VM VirtualBox)
- [CVE-2026-71135](https://cve.now/CVE-2026-71135.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71134](https://cve.now/CVE-2026-71134.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.7, Oracle VM VirtualBox)
- [CVE-2026-71132](https://cve.now/CVE-2026-71132.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.3, Oracle VM VirtualBox)
- [CVE-2026-71131](https://cve.now/CVE-2026-71131.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.6, Oracle VM VirtualBox)
- [CVE-2026-71130](https://cve.now/CVE-2026-71130.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2026-71129](https://cve.now/CVE-2026-71129.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2026-71128](https://cve.now/CVE-2026-71128.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71127](https://cve.now/CVE-2026-71127.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71126](https://cve.now/CVE-2026-71126.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2026-71125](https://cve.now/CVE-2026-71125.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.1, Oracle VM VirtualBox)
- [CVE-2026-71124](https://cve.now/CVE-2026-71124.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authorization Engine). (CVSS 4.3, Oracle Access Manager)
- [CVE-2026-71123](https://cve.now/CVE-2026-71123.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.4, Oracle Hyperion Financial Management)
- [CVE-2026-71122](https://cve.now/CVE-2026-71122.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 8.0, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71121](https://cve.now/CVE-2026-71121.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-71120](https://cve.now/CVE-2026-71120.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-71119](https://cve.now/CVE-2026-71119.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.4, Oracle Hyperion Financial Management)
- [CVE-2026-71118](https://cve.now/CVE-2026-71118.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.8, Oracle Hyperion Financial Management)
- [CVE-2026-71117](https://cve.now/CVE-2026-71117.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-71116](https://cve.now/CVE-2026-71116.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-71115](https://cve.now/CVE-2026-71115.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71114](https://cve.now/CVE-2026-71114.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2026-71113](https://cve.now/CVE-2026-71113.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2026-71112](https://cve.now/CVE-2026-71112.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security). (CVSS 8.1, Oracle PeopleSoft Enterprise FIN Common Objects)
- [CVE-2026-71111](https://cve.now/CVE-2026-71111.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). (CVSS 7.8, Oracle Identity Manager)
- [CVE-2026-71110](https://cve.now/CVE-2026-71110.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 8.1, Oracle Helidon)
- [CVE-2026-71109](https://cve.now/CVE-2026-71109.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.7, Oracle Hyperion Financial Management)
- [CVE-2026-71108](https://cve.now/CVE-2026-71108.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-71107](https://cve.now/CVE-2026-71107.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). (CVSS 7.5, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71106](https://cve.now/CVE-2026-71106.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera Servlet). (CVSS 8.8, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2026-71105](https://cve.now/CVE-2026-71105.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.7, Oracle Hyperion Financial Management)
- [CVE-2026-71104](https://cve.now/CVE-2026-71104.md): Vulnerability in the Oracle HRMS (Netherlands) product of Oracle E-Business Suite (component: Netherlands Payroll). (CVSS 7.2, Oracle HRMS)
- [CVE-2026-71103](https://cve.now/CVE-2026-71103.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.3, Oracle Hyperion Financial Management)
- [CVE-2026-71102](https://cve.now/CVE-2026-71102.md): Vulnerability in the Portable Clusterware component of Oracle Database Server. (CVSS 9.1, Oracle Database Server)
- [CVE-2026-71101](https://cve.now/CVE-2026-71101.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Tax Issues). (CVSS 7.8, Oracle HRMS)
- [CVE-2026-71100](https://cve.now/CVE-2026-71100.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 5.3, Oracle Database Server)
- [CVE-2026-71099](https://cve.now/CVE-2026-71099.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). (CVSS 7.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71098](https://cve.now/CVE-2026-71098.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 7.0, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71097](https://cve.now/CVE-2026-71097.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 7.8, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71096](https://cve.now/CVE-2026-71096.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 8.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71095](https://cve.now/CVE-2026-71095.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 8.3, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71094](https://cve.now/CVE-2026-71094.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). (CVSS 7.3, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71092](https://cve.now/CVE-2026-71092.md): Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft (component: Lease Administration). (CVSS 7.5, Oracle PeopleSoft Enterprise FIN Lease Administration)
- [CVE-2026-71091](https://cve.now/CVE-2026-71091.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-71090](https://cve.now/CVE-2026-71090.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.4, Oracle Hyperion Financial Management)
- [CVE-2026-71089](https://cve.now/CVE-2026-71089.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 3.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71088](https://cve.now/CVE-2026-71088.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 4.8, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71087](https://cve.now/CVE-2026-71087.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 5.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71085](https://cve.now/CVE-2026-71085.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.9, Oracle Hyperion Financial Management)
- [CVE-2026-71084](https://cve.now/CVE-2026-71084.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). (CVSS 6.8, Oracle MySQL Connectors)
- [CVE-2026-71083](https://cve.now/CVE-2026-71083.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 1.8, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71082](https://cve.now/CVE-2026-71082.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 2.5, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71081](https://cve.now/CVE-2026-71081.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 1.9, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71080](https://cve.now/CVE-2026-71080.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 3.7, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71079](https://cve.now/CVE-2026-71079.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). (CVSS 6.5, Oracle MySQL Connectors)
- [CVE-2026-71078](https://cve.now/CVE-2026-71078.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 4.2, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71077](https://cve.now/CVE-2026-71077.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 5.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71076](https://cve.now/CVE-2026-71076.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 5.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71075](https://cve.now/CVE-2026-71075.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 5.9, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71074](https://cve.now/CVE-2026-71074.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.8, Oracle Helidon)
- [CVE-2026-71073](https://cve.now/CVE-2026-71073.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). (CVSS 5.5, Oracle MySQL Connectors)
- [CVE-2026-71072](https://cve.now/CVE-2026-71072.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 3.3, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71071](https://cve.now/CVE-2026-71071.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 4.6, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71070](https://cve.now/CVE-2026-71070.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 6.5, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71069](https://cve.now/CVE-2026-71069.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 7.5, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71068](https://cve.now/CVE-2026-71068.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 8.1, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71067](https://cve.now/CVE-2026-71067.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 8.8, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71066](https://cve.now/CVE-2026-71066.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 4.5, Oracle Agile PLM MCAD Connector)
- [CVE-2026-71065](https://cve.now/CVE-2026-71065.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 9.3, Oracle Helidon)
- [CVE-2026-71064](https://cve.now/CVE-2026-71064.md): Vulnerability in the Portable Clusterware component of Oracle Database Server. (CVSS 9.6, Oracle Database Server)
- [CVE-2026-71063](https://cve.now/CVE-2026-71063.md): Vulnerability in the Portable Clusterware component of Oracle Database Server. (CVSS 9.6, Oracle Database Server)
- [CVE-2026-71062](https://cve.now/CVE-2026-71062.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 8.5, Oracle Database Server)
- [CVE-2026-71061](https://cve.now/CVE-2026-71061.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 7.5, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71060](https://cve.now/CVE-2026-71060.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.4, Oracle Hyperion Financial Management)
- [CVE-2026-71059](https://cve.now/CVE-2026-71059.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). (CVSS 9.9, Oracle BI Publisher)
- [CVE-2026-71058](https://cve.now/CVE-2026-71058.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). (CVSS 8.8, Oracle BI Publisher)
- [CVE-2026-71057](https://cve.now/CVE-2026-71057.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). (CVSS 8.5, Oracle BI Publisher)
- [CVE-2026-71056](https://cve.now/CVE-2026-71056.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). (CVSS 7.7, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71055](https://cve.now/CVE-2026-71055.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 8.8, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-71053](https://cve.now/CVE-2026-71053.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). (CVSS 8.1, Oracle Agile Engineering Data Management)
- [CVE-2026-71052](https://cve.now/CVE-2026-71052.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Services Security). (CVSS 8.8, Oracle Agile Engineering Data Management)
- [CVE-2026-71051](https://cve.now/CVE-2026-71051.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 8.8, Oracle Product Lifecycle Analytics)
- [CVE-2026-71050](https://cve.now/CVE-2026-71050.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 8.7, Oracle Product Lifecycle Analytics)
- [CVE-2026-71049](https://cve.now/CVE-2026-71049.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 8.5, Oracle Product Lifecycle Analytics)
- [CVE-2026-71048](https://cve.now/CVE-2026-71048.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 7.6, Oracle Product Lifecycle Analytics)
- [CVE-2026-71046](https://cve.now/CVE-2026-71046.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-71045](https://cve.now/CVE-2026-71045.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-71044](https://cve.now/CVE-2026-71044.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-71043](https://cve.now/CVE-2026-71043.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 7.5, Oracle Agile PLM)
- [CVE-2026-71042](https://cve.now/CVE-2026-71042.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin). (CVSS 8.1, Oracle Agile PLM)
- [CVE-2026-71041](https://cve.now/CVE-2026-71041.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart). (CVSS 7.0, Oracle Agile PLM)
- [CVE-2026-71040](https://cve.now/CVE-2026-71040.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 9.8, Oracle Agile PLM)
- [CVE-2026-71039](https://cve.now/CVE-2026-71039.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). (CVSS 8.8, Oracle Agile PLM)
- [CVE-2026-71038](https://cve.now/CVE-2026-71038.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71037](https://cve.now/CVE-2026-71037.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 9.3, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71036](https://cve.now/CVE-2026-71036.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71035](https://cve.now/CVE-2026-71035.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). (CVSS 8.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71034](https://cve.now/CVE-2026-71034.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71033](https://cve.now/CVE-2026-71033.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 5.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71032](https://cve.now/CVE-2026-71032.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 7.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71031](https://cve.now/CVE-2026-71031.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71030](https://cve.now/CVE-2026-71030.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 7.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71029](https://cve.now/CVE-2026-71029.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.8, Oracle Helidon)
- [CVE-2026-71028](https://cve.now/CVE-2026-71028.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 7.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71027](https://cve.now/CVE-2026-71027.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 7.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71026](https://cve.now/CVE-2026-71026.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71025](https://cve.now/CVE-2026-71025.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71024](https://cve.now/CVE-2026-71024.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). (CVSS 8.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71023](https://cve.now/CVE-2026-71023.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71022](https://cve.now/CVE-2026-71022.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench). (CVSS 7.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71021](https://cve.now/CVE-2026-71021.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 7.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71020](https://cve.now/CVE-2026-71020.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 7.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71019](https://cve.now/CVE-2026-71019.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Internal oper (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71018](https://cve.now/CVE-2026-71018.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 8.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71017](https://cve.now/CVE-2026-71017.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 6.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71016](https://cve.now/CVE-2026-71016.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 8.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71015](https://cve.now/CVE-2026-71015.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71014](https://cve.now/CVE-2026-71014.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71013](https://cve.now/CVE-2026-71013.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.0, Oracle Hyperion Financial Management)
- [CVE-2026-71012](https://cve.now/CVE-2026-71012.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 7.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71011](https://cve.now/CVE-2026-71011.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71010](https://cve.now/CVE-2026-71010.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 7.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71009](https://cve.now/CVE-2026-71009.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 7.4, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71008](https://cve.now/CVE-2026-71008.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71007](https://cve.now/CVE-2026-71007.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71006](https://cve.now/CVE-2026-71006.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71005](https://cve.now/CVE-2026-71005.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71004](https://cve.now/CVE-2026-71004.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 6.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71003](https://cve.now/CVE-2026-71003.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 7.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71002](https://cve.now/CVE-2026-71002.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 8.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71001](https://cve.now/CVE-2026-71001.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 6.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-71000](https://cve.now/CVE-2026-71000.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 8.7, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70999](https://cve.now/CVE-2026-70999.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 8.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70998](https://cve.now/CVE-2026-70998.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 9.3, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70997](https://cve.now/CVE-2026-70997.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70996](https://cve.now/CVE-2026-70996.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 8.6, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70995](https://cve.now/CVE-2026-70995.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 9.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70994](https://cve.now/CVE-2026-70994.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70993](https://cve.now/CVE-2026-70993.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 8.2, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70992](https://cve.now/CVE-2026-70992.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 7.0, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70991](https://cve.now/CVE-2026-70991.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 6.3, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70990](https://cve.now/CVE-2026-70990.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70989](https://cve.now/CVE-2026-70989.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 6.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70988](https://cve.now/CVE-2026-70988.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 7.7, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70987](https://cve.now/CVE-2026-70987.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70986](https://cve.now/CVE-2026-70986.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70985](https://cve.now/CVE-2026-70985.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 7.5, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70984](https://cve.now/CVE-2026-70984.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70983](https://cve.now/CVE-2026-70983.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70982](https://cve.now/CVE-2026-70982.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 6.8, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70981](https://cve.now/CVE-2026-70981.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70980](https://cve.now/CVE-2026-70980.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 9.0, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70979](https://cve.now/CVE-2026-70979.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70978](https://cve.now/CVE-2026-70978.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70977](https://cve.now/CVE-2026-70977.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70976](https://cve.now/CVE-2026-70976.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui (CVSS 9.1, Oracle Commerce Guided Search / Oracle Commerce Experience…)
- [CVE-2026-70975](https://cve.now/CVE-2026-70975.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70974](https://cve.now/CVE-2026-70974.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-70973](https://cve.now/CVE-2026-70973.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70972](https://cve.now/CVE-2026-70972.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70971](https://cve.now/CVE-2026-70971.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70970](https://cve.now/CVE-2026-70970.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 9.8, Oracle WebCenter Portal)
- [CVE-2026-70969](https://cve.now/CVE-2026-70969.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70968](https://cve.now/CVE-2026-70968.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70967](https://cve.now/CVE-2026-70967.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70966](https://cve.now/CVE-2026-70966.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70965](https://cve.now/CVE-2026-70965.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70964](https://cve.now/CVE-2026-70964.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.2, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70963](https://cve.now/CVE-2026-70963.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 4.2, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70962](https://cve.now/CVE-2026-70962.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70961](https://cve.now/CVE-2026-70961.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70960](https://cve.now/CVE-2026-70960.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.6, Oracle Hyperion Financial Management)
- [CVE-2026-70959](https://cve.now/CVE-2026-70959.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70958](https://cve.now/CVE-2026-70958.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.6, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70957](https://cve.now/CVE-2026-70957.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70956](https://cve.now/CVE-2026-70956.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-70955](https://cve.now/CVE-2026-70955.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 7.5, Oracle Commerce Platform)
- [CVE-2026-70954](https://cve.now/CVE-2026-70954.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 9.8, Oracle Commerce Platform)
- [CVE-2026-70953](https://cve.now/CVE-2026-70953.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 9.8, Oracle Commerce Platform)
- [CVE-2026-70952](https://cve.now/CVE-2026-70952.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.2, Oracle Hyperion Financial Management)
- [CVE-2026-70951](https://cve.now/CVE-2026-70951.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management). (CVSS 8.8, Oracle Siebel CRM End User)
- [CVE-2026-70950](https://cve.now/CVE-2026-70950.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.2, Oracle Hyperion Financial Management)
- [CVE-2026-70949](https://cve.now/CVE-2026-70949.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 8.8, Oracle Siebel CRM Deployment)
- [CVE-2026-70948](https://cve.now/CVE-2026-70948.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). (CVSS 8.8, Oracle Purchasing)
- [CVE-2026-70947](https://cve.now/CVE-2026-70947.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). (CVSS 7.5, Oracle Purchasing)
- [CVE-2026-70946](https://cve.now/CVE-2026-70946.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-70945](https://cve.now/CVE-2026-70945.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Payroll)
- [CVE-2026-70944](https://cve.now/CVE-2026-70944.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70943](https://cve.now/CVE-2026-70943.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Financial Management)
- [CVE-2026-70942](https://cve.now/CVE-2026-70942.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.7, Oracle Hyperion Financial Management)
- [CVE-2026-70941](https://cve.now/CVE-2026-70941.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Payroll)
- [CVE-2026-70940](https://cve.now/CVE-2026-70940.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70939](https://cve.now/CVE-2026-70939.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.2, Oracle Hyperion Financial Management)
- [CVE-2026-70938](https://cve.now/CVE-2026-70938.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70937](https://cve.now/CVE-2026-70937.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-70936](https://cve.now/CVE-2026-70936.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Financial Management)
- [CVE-2026-70935](https://cve.now/CVE-2026-70935.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Financial Management)
- [CVE-2026-70934](https://cve.now/CVE-2026-70934.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Financial Management)
- [CVE-2026-70933](https://cve.now/CVE-2026-70933.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Financial Management)
- [CVE-2026-70932](https://cve.now/CVE-2026-70932.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 7.2, Oracle Order Management)
- [CVE-2026-70931](https://cve.now/CVE-2026-70931.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 8.1, Oracle Workflow)
- [CVE-2026-70930](https://cve.now/CVE-2026-70930.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 7.5, Oracle Order Management)
- [CVE-2026-70929](https://cve.now/CVE-2026-70929.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Financial Management)
- [CVE-2026-70928](https://cve.now/CVE-2026-70928.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70927](https://cve.now/CVE-2026-70927.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 7.5, Oracle Workflow)
- [CVE-2026-70926](https://cve.now/CVE-2026-70926.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 9.8, Oracle Workflow)
- [CVE-2026-70925](https://cve.now/CVE-2026-70925.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Financial Management)
- [CVE-2026-70924](https://cve.now/CVE-2026-70924.md): Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). (CVSS 8.1, Oracle Web Services Manager)
- [CVE-2026-70923](https://cve.now/CVE-2026-70923.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 6.1, Oracle Helidon)
- [CVE-2026-70922](https://cve.now/CVE-2026-70922.md): Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications (component: Web (CVSS 8.8, Oracle Financial Services Enterprise Case Management)
- [CVE-2026-70921](https://cve.now/CVE-2026-70921.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 10.0, Oracle Hyperion Financial Management)
- [CVE-2026-70920](https://cve.now/CVE-2026-70920.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 9.9, Oracle Hyperion Financial Management)
- [CVE-2026-70919](https://cve.now/CVE-2026-70919.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 2.5, Oracle Hyperion Financial Management)
- [CVE-2026-70918](https://cve.now/CVE-2026-70918.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data). (CVSS 8.8, Oracle Product Hub)
- [CVE-2026-70917](https://cve.now/CVE-2026-70917.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.0, Oracle Hyperion Financial Management)
- [CVE-2026-70916](https://cve.now/CVE-2026-70916.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.0, Oracle Hyperion Financial Management)
- [CVE-2026-70914](https://cve.now/CVE-2026-70914.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.0, Oracle Hyperion Financial Management)
- [CVE-2026-70912](https://cve.now/CVE-2026-70912.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-70911](https://cve.now/CVE-2026-70911.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Financial Management)
- [CVE-2026-70910](https://cve.now/CVE-2026-70910.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 7.5, Oracle Siebel CRM Integration)
- [CVE-2026-70909](https://cve.now/CVE-2026-70909.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.2, Oracle Hyperion Financial Management)
- [CVE-2026-70908](https://cve.now/CVE-2026-70908.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.5, Oracle Helidon)
- [CVE-2026-70907](https://cve.now/CVE-2026-70907.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 5.3, Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente…)
- [CVE-2026-70906](https://cve.now/CVE-2026-70906.md): Vulnerability in Oracle Java SE (component: 2D). (CVSS 7.5, Oracle Java SE)
- [CVE-2026-70905](https://cve.now/CVE-2026-70905.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure). (CVSS 9.8, Oracle Access Manager)
- [CVE-2026-70904](https://cve.now/CVE-2026-70904.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70903](https://cve.now/CVE-2026-70903.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.7, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70902](https://cve.now/CVE-2026-70902.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70901](https://cve.now/CVE-2026-70901.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70900](https://cve.now/CVE-2026-70900.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.7, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70899](https://cve.now/CVE-2026-70899.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70898](https://cve.now/CVE-2026-70898.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.4, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70897](https://cve.now/CVE-2026-70897.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70896](https://cve.now/CVE-2026-70896.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70895](https://cve.now/CVE-2026-70895.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 6.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70894](https://cve.now/CVE-2026-70894.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.7, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70893](https://cve.now/CVE-2026-70893.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70892](https://cve.now/CVE-2026-70892.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70891](https://cve.now/CVE-2026-70891.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70890](https://cve.now/CVE-2026-70890.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70889](https://cve.now/CVE-2026-70889.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70888](https://cve.now/CVE-2026-70888.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 6.6, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70887](https://cve.now/CVE-2026-70887.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70886](https://cve.now/CVE-2026-70886.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70885](https://cve.now/CVE-2026-70885.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70884](https://cve.now/CVE-2026-70884.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70883](https://cve.now/CVE-2026-70883.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70882](https://cve.now/CVE-2026-70882.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.7, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70881](https://cve.now/CVE-2026-70881.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70880](https://cve.now/CVE-2026-70880.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 10.0, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70879](https://cve.now/CVE-2026-70879.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70878](https://cve.now/CVE-2026-70878.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70877](https://cve.now/CVE-2026-70877.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70876](https://cve.now/CVE-2026-70876.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70875](https://cve.now/CVE-2026-70875.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 7.5, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70874](https://cve.now/CVE-2026-70874.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 8.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70873](https://cve.now/CVE-2026-70873.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70872](https://cve.now/CVE-2026-70872.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.1, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70871](https://cve.now/CVE-2026-70871.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). (CVSS 9.8, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70870](https://cve.now/CVE-2026-70870.md): Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Client - Unicode). (CVSS 8.2, Oracle Hyperion Data Relationship Management)
- [CVE-2026-70868](https://cve.now/CVE-2026-70868.md): Vulnerability in Oracle Application Testing Suite. (CVSS 8.1, Oracle Application Testing Suite)
- [CVE-2026-70867](https://cve.now/CVE-2026-70867.md): Vulnerability in Oracle Application Testing Suite. (CVSS 7.1, Oracle Application Testing Suite)
- [CVE-2026-70866](https://cve.now/CVE-2026-70866.md): Vulnerability in Oracle Application Testing Suite. (CVSS 7.8, Oracle Application Testing Suite)
- [CVE-2026-70865](https://cve.now/CVE-2026-70865.md): Vulnerability in Oracle Application Testing Suite. (CVSS 7.5, Oracle Application Testing Suite)
- [CVE-2026-70864](https://cve.now/CVE-2026-70864.md): Vulnerability in Oracle Application Testing Suite. (CVSS 7.6, Oracle Application Testing Suite)
- [CVE-2026-70863](https://cve.now/CVE-2026-70863.md): Vulnerability in Oracle Application Testing Suite. (CVSS 8.8, Oracle Application Testing Suite)
- [CVE-2026-70862](https://cve.now/CVE-2026-70862.md): Vulnerability in Oracle Application Testing Suite. (CVSS 9.1, Oracle Application Testing Suite)
- [CVE-2026-70861](https://cve.now/CVE-2026-70861.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). (CVSS 7.2, Oracle PeopleSoft Enterprise FIN Common Objects Brazil)
- [CVE-2026-70859](https://cve.now/CVE-2026-70859.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 8.5, Oracle Siebel CRM Integration)
- [CVE-2026-70858](https://cve.now/CVE-2026-70858.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-70857](https://cve.now/CVE-2026-70857.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 7.7, Oracle Siebel CRM End User)
- [CVE-2026-70856](https://cve.now/CVE-2026-70856.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). (CVSS 7.5, Oracle Siebel CRM Deployment)
- [CVE-2026-70855](https://cve.now/CVE-2026-70855.md): Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). (CVSS 9.3, Oracle Siebel Apps - Self Service)
- [CVE-2026-70854](https://cve.now/CVE-2026-70854.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 9.1, Oracle Hyperion Financial Management)
- [CVE-2026-70853](https://cve.now/CVE-2026-70853.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.3, Oracle Hyperion Financial Management)
- [CVE-2026-70852](https://cve.now/CVE-2026-70852.md): Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). (CVSS 8.2, Oracle Demand Planning)
- [CVE-2026-70851](https://cve.now/CVE-2026-70851.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.1, Oracle Hyperion Financial Management)
- [CVE-2026-70850](https://cve.now/CVE-2026-70850.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.0, Oracle Hyperion Financial Management)
- [CVE-2026-70849](https://cve.now/CVE-2026-70849.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70848](https://cve.now/CVE-2026-70848.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 3.7, Oracle Hyperion Financial Management)
- [CVE-2026-70847](https://cve.now/CVE-2026-70847.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70846](https://cve.now/CVE-2026-70846.md): Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). (CVSS 9.6, Oracle Demand Planning)
- [CVE-2026-70845](https://cve.now/CVE-2026-70845.md): Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Loans)
- [CVE-2026-70844](https://cve.now/CVE-2026-70844.md): Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Loans)
- [CVE-2026-70843](https://cve.now/CVE-2026-70843.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.8, Oracle Hyperion Financial Management)
- [CVE-2026-70842](https://cve.now/CVE-2026-70842.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.4, Oracle Hyperion Financial Management)
- [CVE-2026-70841](https://cve.now/CVE-2026-70841.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.6, Oracle Hyperion Financial Management)
- [CVE-2026-70840](https://cve.now/CVE-2026-70840.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.4, Oracle Hyperion Financial Management)
- [CVE-2026-70839](https://cve.now/CVE-2026-70839.md): Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Financials for EMEA)
- [CVE-2026-70838](https://cve.now/CVE-2026-70838.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.1, Oracle Hyperion Financial Management)
- [CVE-2026-70837](https://cve.now/CVE-2026-70837.md): Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Financials for Asia/Pacific)
- [CVE-2026-70836](https://cve.now/CVE-2026-70836.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 5.5, Oracle Hyperion Financial Management)
- [CVE-2026-70835](https://cve.now/CVE-2026-70835.md): Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle iRecruitment)
- [CVE-2026-70834](https://cve.now/CVE-2026-70834.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.2, Oracle Hyperion Financial Management)
- [CVE-2026-70833](https://cve.now/CVE-2026-70833.md): Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Landed Cost Management)
- [CVE-2026-70832](https://cve.now/CVE-2026-70832.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-70831](https://cve.now/CVE-2026-70831.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70830](https://cve.now/CVE-2026-70830.md): Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Process Manufacturing Systems)
- [CVE-2026-70829](https://cve.now/CVE-2026-70829.md): Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Process Manufacturing Systems)
- [CVE-2026-70828](https://cve.now/CVE-2026-70828.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.7, Oracle Hyperion Financial Management)
- [CVE-2026-70827](https://cve.now/CVE-2026-70827.md): Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle MES for Process Manufacturing)
- [CVE-2026-70826](https://cve.now/CVE-2026-70826.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70825](https://cve.now/CVE-2026-70825.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70824](https://cve.now/CVE-2026-70824.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Financial Management)
- [CVE-2026-70823](https://cve.now/CVE-2026-70823.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.4, Oracle Hyperion Financial Management)
- [CVE-2026-70822](https://cve.now/CVE-2026-70822.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 7.5, Oracle Hyperion Financial Management)
- [CVE-2026-70821](https://cve.now/CVE-2026-70821.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70820](https://cve.now/CVE-2026-70820.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Call Center Technology)
- [CVE-2026-70819](https://cve.now/CVE-2026-70819.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70818](https://cve.now/CVE-2026-70818.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Financial Management)
- [CVE-2026-70817](https://cve.now/CVE-2026-70817.md): Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 9.8, Oracle Hyperion Financial Management)
- [CVE-2026-70816](https://cve.now/CVE-2026-70816.md): Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Financials for EMEA)
- [CVE-2026-70815](https://cve.now/CVE-2026-70815.md): Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Internet Procurement Connector)
- [CVE-2026-70814](https://cve.now/CVE-2026-70814.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Call Center Technology)
- [CVE-2026-70813](https://cve.now/CVE-2026-70813.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Call Center Technology)
- [CVE-2026-70812](https://cve.now/CVE-2026-70812.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Call Center Technology)
- [CVE-2026-70811](https://cve.now/CVE-2026-70811.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Purchasing)
- [CVE-2026-70810](https://cve.now/CVE-2026-70810.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Scripting)
- [CVE-2026-70809](https://cve.now/CVE-2026-70809.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Scripting)
- [CVE-2026-70808](https://cve.now/CVE-2026-70808.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Scripting)
- [CVE-2026-70807](https://cve.now/CVE-2026-70807.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.5, Oracle Call Center Technology)
- [CVE-2026-70806](https://cve.now/CVE-2026-70806.md): Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle E-Business Tax)
- [CVE-2026-70805](https://cve.now/CVE-2026-70805.md): Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite (component: Change Management). (CVSS 8.1, Oracle Project Planning and Control)
- [CVE-2026-70804](https://cve.now/CVE-2026-70804.md): Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). (CVSS 7.7, Oracle Public Sector Human Resources)
- [CVE-2026-70803](https://cve.now/CVE-2026-70803.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle General Ledger)
- [CVE-2026-70802](https://cve.now/CVE-2026-70802.md): Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). (CVSS 8.0, Oracle Public Sector Human Resources)
- [CVE-2026-70801](https://cve.now/CVE-2026-70801.md): Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Flow Manufacturing)
- [CVE-2026-70800](https://cve.now/CVE-2026-70800.md): Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.3, Oracle SDP Number Portability)
- [CVE-2026-70799](https://cve.now/CVE-2026-70799.md): Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle SDP Number Portability)
- [CVE-2026-70798](https://cve.now/CVE-2026-70798.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.8, Oracle Purchasing)
- [CVE-2026-70797](https://cve.now/CVE-2026-70797.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Purchasing)
- [CVE-2026-70796](https://cve.now/CVE-2026-70796.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle General Ledger)
- [CVE-2026-70795](https://cve.now/CVE-2026-70795.md): Vulnerability in the Oracle Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). (CVSS 8.1, Oracle Applications Platform Engineering)
- [CVE-2026-70794](https://cve.now/CVE-2026-70794.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 4.7, Oracle Hyperion Financial Reporting)
- [CVE-2026-70793](https://cve.now/CVE-2026-70793.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 4.2, Oracle Hyperion Financial Reporting)
- [CVE-2026-70792](https://cve.now/CVE-2026-70792.md): Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Yard Management)
- [CVE-2026-70791](https://cve.now/CVE-2026-70791.md): Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Transportation Execution)
- [CVE-2026-70790](https://cve.now/CVE-2026-70790.md): Vulnerability in the Oracle Telecommunications Billing Integrator product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle Telecommunications Billing Integrator)
- [CVE-2026-70789](https://cve.now/CVE-2026-70789.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.9, Oracle Hyperion Financial Reporting)
- [CVE-2026-70788](https://cve.now/CVE-2026-70788.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-70787](https://cve.now/CVE-2026-70787.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70786](https://cve.now/CVE-2026-70786.md): Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). (CVSS 7.6, Oracle Service Fulfillment Manager)
- [CVE-2026-70785](https://cve.now/CVE-2026-70785.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 3.7, Oracle Hyperion Financial Reporting)
- [CVE-2026-70784](https://cve.now/CVE-2026-70784.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.3, Oracle Hyperion Financial Reporting)
- [CVE-2026-70783](https://cve.now/CVE-2026-70783.md): Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle Service Contracts)
- [CVE-2026-70782](https://cve.now/CVE-2026-70782.md): Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Labor Distribution)
- [CVE-2026-70781](https://cve.now/CVE-2026-70781.md): Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Proposals)
- [CVE-2026-70780](https://cve.now/CVE-2026-70780.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70779](https://cve.now/CVE-2026-70779.md): Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle iSupplier Portal)
- [CVE-2026-70778](https://cve.now/CVE-2026-70778.md): Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.7, Oracle Customer Care)
- [CVE-2026-70777](https://cve.now/CVE-2026-70777.md): Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle iSupplier Portal)
- [CVE-2026-70776](https://cve.now/CVE-2026-70776.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 2.6, Oracle Hyperion Financial Reporting)
- [CVE-2026-70775](https://cve.now/CVE-2026-70775.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). (CVSS 6.3, Oracle Installed Base)
- [CVE-2026-70774](https://cve.now/CVE-2026-70774.md): Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Warehouse Management)
- [CVE-2026-70773](https://cve.now/CVE-2026-70773.md): Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration). (CVSS 8.2, Oracle HCM Common Architecture)
- [CVE-2026-70772](https://cve.now/CVE-2026-70772.md): Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Warehouse Management)
- [CVE-2026-70771](https://cve.now/CVE-2026-70771.md): Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Warehouse Management)
- [CVE-2026-70770](https://cve.now/CVE-2026-70770.md): Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.3, Oracle Warehouse Management)
- [CVE-2026-70769](https://cve.now/CVE-2026-70769.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-70768](https://cve.now/CVE-2026-70768.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70767](https://cve.now/CVE-2026-70767.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-70766](https://cve.now/CVE-2026-70766.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.4, Oracle Hyperion Financial Reporting)
- [CVE-2026-70765](https://cve.now/CVE-2026-70765.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70764](https://cve.now/CVE-2026-70764.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle General Ledger)
- [CVE-2026-70763](https://cve.now/CVE-2026-70763.md): Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: Daily Business Intelligence). (CVSS 7.5, Oracle Operations Intelligence)
- [CVE-2026-70762](https://cve.now/CVE-2026-70762.md): Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Risk Management)
- [CVE-2026-70761](https://cve.now/CVE-2026-70761.md): Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Risk Management)
- [CVE-2026-70760](https://cve.now/CVE-2026-70760.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 7.1, Oracle Order Management)
- [CVE-2026-70759](https://cve.now/CVE-2026-70759.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.4, Oracle Hyperion Financial Reporting)
- [CVE-2026-70758](https://cve.now/CVE-2026-70758.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.3, Oracle Hyperion Financial Reporting)
- [CVE-2026-70754](https://cve.now/CVE-2026-70754.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 5.3, Oracle Hyperion Financial Reporting)
- [CVE-2026-70753](https://cve.now/CVE-2026-70753.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.3, Oracle Hyperion Financial Reporting)
- [CVE-2026-70752](https://cve.now/CVE-2026-70752.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 7.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-70751](https://cve.now/CVE-2026-70751.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 6.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70750](https://cve.now/CVE-2026-70750.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 7.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70749](https://cve.now/CVE-2026-70749.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70747](https://cve.now/CVE-2026-70747.md): Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab). (CVSS 8.8, Oracle Customers Online)
- [CVE-2026-70746](https://cve.now/CVE-2026-70746.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70745](https://cve.now/CVE-2026-70745.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 9.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70744](https://cve.now/CVE-2026-70744.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70743](https://cve.now/CVE-2026-70743.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.2, Oracle Hyperion Financial Reporting)
- [CVE-2026-70742](https://cve.now/CVE-2026-70742.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 8.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70741](https://cve.now/CVE-2026-70741.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 9.1, Oracle Hyperion Financial Reporting)
- [CVE-2026-70740](https://cve.now/CVE-2026-70740.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 9.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70739](https://cve.now/CVE-2026-70739.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 9.8, Oracle Hyperion Financial Reporting)
- [CVE-2026-70738](https://cve.now/CVE-2026-70738.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 8.1, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70737](https://cve.now/CVE-2026-70737.md): Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Storage Server Ma (CVSS 8.8, Oracle Enterprise Manager for Systems Infrastructure)
- [CVE-2026-70736](https://cve.now/CVE-2026-70736.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 7.1, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70735](https://cve.now/CVE-2026-70735.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 7.2, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70734](https://cve.now/CVE-2026-70734.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 7.4, Oracle Autonomous Health Framework)
- [CVE-2026-70733](https://cve.now/CVE-2026-70733.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 7.1, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70732](https://cve.now/CVE-2026-70732.md): Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). (CVSS 6.5, Oracle Mobile Application Server)
- [CVE-2026-70731](https://cve.now/CVE-2026-70731.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 8.4, Oracle Autonomous Health Framework)
- [CVE-2026-70730](https://cve.now/CVE-2026-70730.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 9.1, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70729](https://cve.now/CVE-2026-70729.md): Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Request Form). (CVSS 8.8, Oracle Teleservice)
- [CVE-2026-70728](https://cve.now/CVE-2026-70728.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 8.5, Oracle Autonomous Health Framework)
- [CVE-2026-70727](https://cve.now/CVE-2026-70727.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.3, Oracle Helidon)
- [CVE-2026-70726](https://cve.now/CVE-2026-70726.md): Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.0, Oracle Cash Management)
- [CVE-2026-70725](https://cve.now/CVE-2026-70725.md): Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Advanced Inbound Telephony)
- [CVE-2026-70724](https://cve.now/CVE-2026-70724.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 7.5, Oracle MySQL Cluster)
- [CVE-2026-70723](https://cve.now/CVE-2026-70723.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 7.7, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70722](https://cve.now/CVE-2026-70722.md): Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.2, Oracle Advanced Inbound Telephony)
- [CVE-2026-70721](https://cve.now/CVE-2026-70721.md): Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). (CVSS 8.6, Oracle Hyperion Profitability and Cost Management)
- [CVE-2026-70720](https://cve.now/CVE-2026-70720.md): Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Production Scheduling)
- [CVE-2026-70719](https://cve.now/CVE-2026-70719.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 4.0, Oracle Hyperion Calculation Manager)
- [CVE-2026-70718](https://cve.now/CVE-2026-70718.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.5, Oracle Bills of Material)
- [CVE-2026-70717](https://cve.now/CVE-2026-70717.md): Vulnerability in Oracle Autonomous Health Framework (component: Cluster Health Analyzer). (CVSS 7.7, Oracle Autonomous Health Framework)
- [CVE-2026-70716](https://cve.now/CVE-2026-70716.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 5.9, Oracle Helidon)
- [CVE-2026-70715](https://cve.now/CVE-2026-70715.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 8.8, Oracle Autonomous Health Framework)
- [CVE-2026-70714](https://cve.now/CVE-2026-70714.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 4.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-70713](https://cve.now/CVE-2026-70713.md): Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). (CVSS 7.5, Oracle iSetup)
- [CVE-2026-70712](https://cve.now/CVE-2026-70712.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 6.4, Oracle Agile Engineering Data Management)
- [CVE-2026-70711](https://cve.now/CVE-2026-70711.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.6, Oracle Hyperion Calculation Manager)
- [CVE-2026-70710](https://cve.now/CVE-2026-70710.md): Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). (CVSS 8.8, Oracle Sales Foundation)
- [CVE-2026-70709](https://cve.now/CVE-2026-70709.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 4.8, Oracle Agile Engineering Data Management)
- [CVE-2026-70708](https://cve.now/CVE-2026-70708.md): Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). (CVSS 8.1, Oracle Sales Foundation)
- [CVE-2026-70707](https://cve.now/CVE-2026-70707.md): Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Sales for Handhelds)
- [CVE-2026-70706](https://cve.now/CVE-2026-70706.md): Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Sales)
- [CVE-2026-70705](https://cve.now/CVE-2026-70705.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-70704](https://cve.now/CVE-2026-70704.md): Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). (CVSS 8.1, Oracle Trading Community)
- [CVE-2026-70703](https://cve.now/CVE-2026-70703.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 8.2, Oracle Agile Engineering Data Management)
- [CVE-2026-70702](https://cve.now/CVE-2026-70702.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 8.2, Oracle Payments)
- [CVE-2026-70701](https://cve.now/CVE-2026-70701.md): Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Payables)
- [CVE-2026-70700](https://cve.now/CVE-2026-70700.md): Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Payables)
- [CVE-2026-70699](https://cve.now/CVE-2026-70699.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.4, Oracle Payments)
- [CVE-2026-70698](https://cve.now/CVE-2026-70698.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 6.7, Oracle Agile Engineering Data Management)
- [CVE-2026-70697](https://cve.now/CVE-2026-70697.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 7.0, Oracle Agile Engineering Data Management)
- [CVE-2026-70696](https://cve.now/CVE-2026-70696.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.5, Oracle Payments)
- [CVE-2026-70695](https://cve.now/CVE-2026-70695.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.7, Oracle Payments)
- [CVE-2026-70694](https://cve.now/CVE-2026-70694.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.7, Oracle Payments)
- [CVE-2026-70693](https://cve.now/CVE-2026-70693.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 6.3, Oracle Agile Engineering Data Management)
- [CVE-2026-70692](https://cve.now/CVE-2026-70692.md): Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Marketing Encyclopedia System)
- [CVE-2026-70691](https://cve.now/CVE-2026-70691.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 7.5, Oracle Agile Engineering Data Management)
- [CVE-2026-70690](https://cve.now/CVE-2026-70690.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). (CVSS 8.0, Oracle HRMS)
- [CVE-2026-70689](https://cve.now/CVE-2026-70689.md): Vulnerability in Oracle Essbase (component: Infrastructure). (CVSS 9.8, Oracle Essbase)
- [CVE-2026-70688](https://cve.now/CVE-2026-70688.md): Vulnerability in Oracle Essbase (component: Calculator). (CVSS 8.8, Oracle Essbase)
- [CVE-2026-70687](https://cve.now/CVE-2026-70687.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). (CVSS 7.7, Oracle Marketing)
- [CVE-2026-70686](https://cve.now/CVE-2026-70686.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle General Ledger)
- [CVE-2026-70685](https://cve.now/CVE-2026-70685.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.9, Oracle Hyperion Calculation Manager)
- [CVE-2026-70684](https://cve.now/CVE-2026-70684.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 8.1, Oracle Enterprise Manager Base Platform)
- [CVE-2026-70683](https://cve.now/CVE-2026-70683.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 4.3, Oracle Hyperion Calculation Manager)
- [CVE-2026-70682](https://cve.now/CVE-2026-70682.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.7, Oracle Hyperion Calculation Manager)
- [CVE-2026-70681](https://cve.now/CVE-2026-70681.md): Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: JRI and other Java utils). (CVSS 7.5, Oracle Applications DBA)
- [CVE-2026-70680](https://cve.now/CVE-2026-70680.md): Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Applications DBA)
- [CVE-2026-70679](https://cve.now/CVE-2026-70679.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Calculation Manager)
- [CVE-2026-70678](https://cve.now/CVE-2026-70678.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.6, Oracle Hyperion Calculation Manager)
- [CVE-2026-70677](https://cve.now/CVE-2026-70677.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.9, Oracle Hyperion Calculation Manager)
- [CVE-2026-70676](https://cve.now/CVE-2026-70676.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.0, Oracle Hyperion Calculation Manager)
- [CVE-2026-70675](https://cve.now/CVE-2026-70675.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.1, Oracle Reports Developer)
- [CVE-2026-70674](https://cve.now/CVE-2026-70674.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-70673](https://cve.now/CVE-2026-70673.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.3, Oracle Reports Developer)
- [CVE-2026-70672](https://cve.now/CVE-2026-70672.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 7.4, Oracle Reports Developer)
- [CVE-2026-70671](https://cve.now/CVE-2026-70671.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.1, Oracle Reports Developer)
- [CVE-2026-70670](https://cve.now/CVE-2026-70670.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.6, Oracle Reports Developer)
- [CVE-2026-70669](https://cve.now/CVE-2026-70669.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-70668](https://cve.now/CVE-2026-70668.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.1, Oracle Reports Developer)
- [CVE-2026-62640](https://cve.now/CVE-2026-62640.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62639](https://cve.now/CVE-2026-62639.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62638](https://cve.now/CVE-2026-62638.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.1, Oracle Reports Developer)
- [CVE-2026-62637](https://cve.now/CVE-2026-62637.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.3, Oracle Reports Developer)
- [CVE-2026-62636](https://cve.now/CVE-2026-62636.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.6, Oracle Reports Developer)
- [CVE-2026-62635](https://cve.now/CVE-2026-62635.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62634](https://cve.now/CVE-2026-62634.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62633](https://cve.now/CVE-2026-62633.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62632](https://cve.now/CVE-2026-62632.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62631](https://cve.now/CVE-2026-62631.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-62630](https://cve.now/CVE-2026-62630.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62629](https://cve.now/CVE-2026-62629.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.4, Oracle Reports Developer)
- [CVE-2026-62628](https://cve.now/CVE-2026-62628.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.6, Oracle Reports Developer)
- [CVE-2026-62627](https://cve.now/CVE-2026-62627.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 7.1, Oracle Reports Developer)
- [CVE-2026-62626](https://cve.now/CVE-2026-62626.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62625](https://cve.now/CVE-2026-62625.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.6, Oracle Reports Developer)
- [CVE-2026-62624](https://cve.now/CVE-2026-62624.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62623](https://cve.now/CVE-2026-62623.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-62622](https://cve.now/CVE-2026-62622.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62621](https://cve.now/CVE-2026-62621.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62620](https://cve.now/CVE-2026-62620.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.6, Oracle Reports Developer)
- [CVE-2026-62619](https://cve.now/CVE-2026-62619.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-62618](https://cve.now/CVE-2026-62618.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.3, Oracle Reports Developer)
- [CVE-2026-62617](https://cve.now/CVE-2026-62617.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62616](https://cve.now/CVE-2026-62616.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 7.2, Oracle Reports Developer)
- [CVE-2026-62615](https://cve.now/CVE-2026-62615.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.5, Oracle Reports Developer)
- [CVE-2026-62614](https://cve.now/CVE-2026-62614.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62613](https://cve.now/CVE-2026-62613.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.3, Oracle Reports Developer)
- [CVE-2026-62612](https://cve.now/CVE-2026-62612.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 8.8, Oracle Reports Developer)
- [CVE-2026-62611](https://cve.now/CVE-2026-62611.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62610](https://cve.now/CVE-2026-62610.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.1, Oracle Reports Developer)
- [CVE-2026-62609](https://cve.now/CVE-2026-62609.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.8, Oracle Reports Developer)
- [CVE-2026-62608](https://cve.now/CVE-2026-62608.md): Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). (CVSS 9.9, Oracle Reports Developer)
- [CVE-2026-62607](https://cve.now/CVE-2026-62607.md): Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.7, Oracle Customer Care)
- [CVE-2026-62606](https://cve.now/CVE-2026-62606.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-62605](https://cve.now/CVE-2026-62605.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.2, Oracle Partner Management)
- [CVE-2026-62604](https://cve.now/CVE-2026-62604.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-62603](https://cve.now/CVE-2026-62603.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.4, Oracle Hyperion Calculation Manager)
- [CVE-2026-62602](https://cve.now/CVE-2026-62602.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.0, Oracle Hyperion Calculation Manager)
- [CVE-2026-62601](https://cve.now/CVE-2026-62601.md): Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Sales)
- [CVE-2026-62600](https://cve.now/CVE-2026-62600.md): Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Sales)
- [CVE-2026-62599](https://cve.now/CVE-2026-62599.md): Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Third Party Data Integration). (CVSS 8.6, Oracle Trading Community)
- [CVE-2026-62598](https://cve.now/CVE-2026-62598.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.2, Oracle Hyperion Calculation Manager)
- [CVE-2026-62596](https://cve.now/CVE-2026-62596.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.5, Oracle Siebel CRM Integration)
- [CVE-2026-62595](https://cve.now/CVE-2026-62595.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.1, Oracle Siebel CRM Integration)
- [CVE-2026-62594](https://cve.now/CVE-2026-62594.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 7.7, Oracle Siebel CRM Integration)
- [CVE-2026-62593](https://cve.now/CVE-2026-62593.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 7.7, Oracle Siebel CRM Integration)
- [CVE-2026-62592](https://cve.now/CVE-2026-62592.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 9.8, Oracle Siebel CRM Integration)
- [CVE-2026-62591](https://cve.now/CVE-2026-62591.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.1, Oracle Siebel CRM Integration)
- [CVE-2026-62590](https://cve.now/CVE-2026-62590.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.5, Oracle Siebel CRM Integration)
- [CVE-2026-62589](https://cve.now/CVE-2026-62589.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 8.7, Oracle Siebel CRM Integration)
- [CVE-2026-62588](https://cve.now/CVE-2026-62588.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 9.9, Oracle Siebel CRM Integration)
- [CVE-2026-62587](https://cve.now/CVE-2026-62587.md): Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). (CVSS 7.1, Oracle Siebel CRM Administration)
- [CVE-2026-62586](https://cve.now/CVE-2026-62586.md): Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). (CVSS 8.6, Oracle Siebel CRM Administration)
- [CVE-2026-62585](https://cve.now/CVE-2026-62585.md): Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). (CVSS 9.8, Oracle Siebel CRM Administration)
- [CVE-2026-62584](https://cve.now/CVE-2026-62584.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 4.0, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62583](https://cve.now/CVE-2026-62583.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.0, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62582](https://cve.now/CVE-2026-62582.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 9.6, Oracle Hyperion Calculation Manager)
- [CVE-2026-62581](https://cve.now/CVE-2026-62581.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62580](https://cve.now/CVE-2026-62580.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 2.6, Oracle Hyperion Calculation Manager)
- [CVE-2026-62579](https://cve.now/CVE-2026-62579.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62578](https://cve.now/CVE-2026-62578.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 6.5, Oracle Hyperion Calculation Manager)
- [CVE-2026-62577](https://cve.now/CVE-2026-62577.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62576](https://cve.now/CVE-2026-62576.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62575](https://cve.now/CVE-2026-62575.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 4.7, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62573](https://cve.now/CVE-2026-62573.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62572](https://cve.now/CVE-2026-62572.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62571](https://cve.now/CVE-2026-62571.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.7, Oracle Hyperion Calculation Manager)
- [CVE-2026-62570](https://cve.now/CVE-2026-62570.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.0, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62569](https://cve.now/CVE-2026-62569.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.4, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62568](https://cve.now/CVE-2026-62568.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62566](https://cve.now/CVE-2026-62566.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62564](https://cve.now/CVE-2026-62564.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62558](https://cve.now/CVE-2026-62558.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62555](https://cve.now/CVE-2026-62555.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62554](https://cve.now/CVE-2026-62554.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62553](https://cve.now/CVE-2026-62553.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62552](https://cve.now/CVE-2026-62552.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62551](https://cve.now/CVE-2026-62551.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62550](https://cve.now/CVE-2026-62550.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62545](https://cve.now/CVE-2026-62545.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62544](https://cve.now/CVE-2026-62544.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62543](https://cve.now/CVE-2026-62543.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62541](https://cve.now/CVE-2026-62541.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62540](https://cve.now/CVE-2026-62540.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). (CVSS 7.2, Oracle Cost Management)
- [CVE-2026-62539](https://cve.now/CVE-2026-62539.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62538](https://cve.now/CVE-2026-62538.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.4, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62537](https://cve.now/CVE-2026-62537.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62536](https://cve.now/CVE-2026-62536.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62535](https://cve.now/CVE-2026-62535.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 8.6, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62533](https://cve.now/CVE-2026-62533.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.7, Oracle Hyperion Calculation Manager)
- [CVE-2026-62532](https://cve.now/CVE-2026-62532.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.8, Oracle Hyperion Calculation Manager)
- [CVE-2026-62531](https://cve.now/CVE-2026-62531.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62529](https://cve.now/CVE-2026-62529.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.5, Oracle Hyperion Calculation Manager)
- [CVE-2026-62526](https://cve.now/CVE-2026-62526.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 3.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62523](https://cve.now/CVE-2026-62523.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62522](https://cve.now/CVE-2026-62522.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 7.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62520](https://cve.now/CVE-2026-62520.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 4.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62512](https://cve.now/CVE-2026-62512.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.9, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62511](https://cve.now/CVE-2026-62511.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 3.0, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62510](https://cve.now/CVE-2026-62510.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). (CVSS 5.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62509](https://cve.now/CVE-2026-62509.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 5.3, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62506](https://cve.now/CVE-2026-62506.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 6.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62502](https://cve.now/CVE-2026-62502.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62501](https://cve.now/CVE-2026-62501.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62500](https://cve.now/CVE-2026-62500.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62499](https://cve.now/CVE-2026-62499.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 6.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62492](https://cve.now/CVE-2026-62492.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 7.4, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62491](https://cve.now/CVE-2026-62491.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Purchasing)
- [CVE-2026-62485](https://cve.now/CVE-2026-62485.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.2, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62481](https://cve.now/CVE-2026-62481.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62477](https://cve.now/CVE-2026-62477.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62475](https://cve.now/CVE-2026-62475.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.6, Oracle Shipping Execution)
- [CVE-2026-62471](https://cve.now/CVE-2026-62471.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 8.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62467](https://cve.now/CVE-2026-62467.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 7.7, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62463](https://cve.now/CVE-2026-62463.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). (CVSS 9.6, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62462](https://cve.now/CVE-2026-62462.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Work in Process)
- [CVE-2026-62461](https://cve.now/CVE-2026-62461.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 3.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-62460](https://cve.now/CVE-2026-62460.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.0, Oracle Hyperion Calculation Manager)
- [CVE-2026-62459](https://cve.now/CVE-2026-62459.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.2, Oracle Hyperion Calculation Manager)
- [CVE-2026-62458](https://cve.now/CVE-2026-62458.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Work in Process)
- [CVE-2026-62457](https://cve.now/CVE-2026-62457.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). (CVSS 9.8, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-62455](https://cve.now/CVE-2026-62455.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.3, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62454](https://cve.now/CVE-2026-62454.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 7.8, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62452](https://cve.now/CVE-2026-62452.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.9, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62450](https://cve.now/CVE-2026-62450.md): Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Flow Manufacturing)
- [CVE-2026-62449](https://cve.now/CVE-2026-62449.md): Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.0, Oracle Work in Process)
- [CVE-2026-62448](https://cve.now/CVE-2026-62448.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). (CVSS 8.2, Oracle Email Center)
- [CVE-2026-62446](https://cve.now/CVE-2026-62446.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Calculation Manager)
- [CVE-2026-62442](https://cve.now/CVE-2026-62442.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.1, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-62441](https://cve.now/CVE-2026-62441.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.4, Oracle Hyperion Calculation Manager)
- [CVE-2026-61342](https://cve.now/CVE-2026-61342.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 5.3, Oracle Hyperion Calculation Manager)
- [CVE-2026-61341](https://cve.now/CVE-2026-61341.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.8, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61340](https://cve.now/CVE-2026-61340.md): Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.2, Oracle MES for Process Manufacturing)
- [CVE-2026-61339](https://cve.now/CVE-2026-61339.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 7.3, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61332](https://cve.now/CVE-2026-61332.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.7, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61331](https://cve.now/CVE-2026-61331.md): Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). (CVSS 7.7, Oracle Financials Common Modules)
- [CVE-2026-61330](https://cve.now/CVE-2026-61330.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.8, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61326](https://cve.now/CVE-2026-61326.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.5, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61321](https://cve.now/CVE-2026-61321.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.1, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61319](https://cve.now/CVE-2026-61319.md): Vulnerability in the Oracle U.S. (CVSS 8.8, Oracle U.S. Federal Financials)
- [CVE-2026-61318](https://cve.now/CVE-2026-61318.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.8, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61317](https://cve.now/CVE-2026-61317.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.9, Oracle Siebel CRM Cloud Applications)
- [CVE-2026-61313](https://cve.now/CVE-2026-61313.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 6.7, Oracle Hyperion Calculation Manager)
- [CVE-2026-61308](https://cve.now/CVE-2026-61308.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network (CVSS 6.8, Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente…)
- [CVE-2026-61307](https://cve.now/CVE-2026-61307.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects (CVSS 8.1, Oracle PeopleSoft Enterprise CC Common Application Objects)
- [CVE-2026-61306](https://cve.now/CVE-2026-61306.md): Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Production). (CVSS 7.1, Oracle Complex Maintenance, Repair and Overhaul)
- [CVE-2026-61305](https://cve.now/CVE-2026-61305.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). (CVSS 8.3, Oracle BI Publisher)
- [CVE-2026-61302](https://cve.now/CVE-2026-61302.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin). (CVSS 8.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2026-61300](https://cve.now/CVE-2026-61300.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 7.8, Oracle Enterprise Manager Base Platform)
- [CVE-2026-61298](https://cve.now/CVE-2026-61298.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). (CVSS 5.6, Oracle Enterprise Manager Base Platform)
- [CVE-2026-61296](https://cve.now/CVE-2026-61296.md): Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Linear Asset Management). (CVSS 7.6, Oracle Enterprise Asset Management)
- [CVE-2026-61295](https://cve.now/CVE-2026-61295.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-61293](https://cve.now/CVE-2026-61293.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-61291](https://cve.now/CVE-2026-61291.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.8, Oracle WebCenter Content)
- [CVE-2026-61290](https://cve.now/CVE-2026-61290.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-61288](https://cve.now/CVE-2026-61288.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-61286](https://cve.now/CVE-2026-61286.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). (CVSS 8.6, Oracle Enterprise Manager Base Platform)
- [CVE-2026-61284](https://cve.now/CVE-2026-61284.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console). (CVSS 8.8, Oracle Enterprise Manager Base Platform)
- [CVE-2026-61281](https://cve.now/CVE-2026-61281.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-61276](https://cve.now/CVE-2026-61276.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 8.8, Oracle Hyperion Calculation Manager)
- [CVE-2026-61273](https://cve.now/CVE-2026-61273.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-61272](https://cve.now/CVE-2026-61272.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 9.8, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-61270](https://cve.now/CVE-2026-61270.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Orchestrator)
- [CVE-2026-61268](https://cve.now/CVE-2026-61268.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2026-61265](https://cve.now/CVE-2026-61265.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Orchestrator)
- [CVE-2026-61259](https://cve.now/CVE-2026-61259.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 7.1, Oracle Hyperion Calculation Manager)
- [CVE-2026-61258](https://cve.now/CVE-2026-61258.md): Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). (CVSS 9.8, Oracle Internet Directory)
- [CVE-2026-61248](https://cve.now/CVE-2026-61248.md): Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). (CVSS 9.9, Oracle Internet Directory)
- [CVE-2026-61241](https://cve.now/CVE-2026-61241.md): Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). (CVSS 10.0, Oracle Internet Directory)
- [CVE-2026-61231](https://cve.now/CVE-2026-61231.md): Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Directory Server). (CVSS 8.8, Oracle Virtual Directory)
- [CVE-2026-61230](https://cve.now/CVE-2026-61230.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.6, Oracle WebCenter Portal)
- [CVE-2026-61229](https://cve.now/CVE-2026-61229.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.1, Oracle WebCenter Portal)
- [CVE-2026-61228](https://cve.now/CVE-2026-61228.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.6, Oracle WebCenter Portal)
- [CVE-2026-61227](https://cve.now/CVE-2026-61227.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 7.6, Oracle WebCenter Portal)
- [CVE-2026-61222](https://cve.now/CVE-2026-61222.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.2, Oracle WebCenter Portal)
- [CVE-2026-61219](https://cve.now/CVE-2026-61219.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.7, Oracle WebCenter Portal)
- [CVE-2026-61215](https://cve.now/CVE-2026-61215.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.7, Oracle WebCenter Portal)
- [CVE-2026-61213](https://cve.now/CVE-2026-61213.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.8, Oracle WebCenter Portal)
- [CVE-2026-61212](https://cve.now/CVE-2026-61212.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.5, Oracle WebCenter Portal)
- [CVE-2026-61208](https://cve.now/CVE-2026-61208.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 7.6, Oracle WebCenter Portal)
- [CVE-2026-61206](https://cve.now/CVE-2026-61206.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 9.9, Oracle Hyperion Calculation Manager)
- [CVE-2026-61199](https://cve.now/CVE-2026-61199.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 7.7, Oracle WebCenter Portal)
- [CVE-2026-61198](https://cve.now/CVE-2026-61198.md): Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Learning Management)
- [CVE-2026-61193](https://cve.now/CVE-2026-61193.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.7, Oracle WebCenter Portal)
- [CVE-2026-61177](https://cve.now/CVE-2026-61177.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 8.1, Oracle WebCenter Portal)
- [CVE-2026-61139](https://cve.now/CVE-2026-61139.md): Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). (CVSS 6.3, Oracle Public Sector Financials)
- [CVE-2026-61124](https://cve.now/CVE-2026-61124.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 7.1, Oracle WebCenter Portal)
- [CVE-2026-61118](https://cve.now/CVE-2026-61118.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager)
- [CVE-2026-61066](https://cve.now/CVE-2026-61066.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.9, Oracle Identity Manager)
- [CVE-2026-61058](https://cve.now/CVE-2026-61058.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61054](https://cve.now/CVE-2026-61054.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.2, Oracle WebCenter Sites)
- [CVE-2026-61045](https://cve.now/CVE-2026-61045.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.6, Oracle WebCenter Sites)
- [CVE-2026-61042](https://cve.now/CVE-2026-61042.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61040](https://cve.now/CVE-2026-61040.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61038](https://cve.now/CVE-2026-61038.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.2, Oracle WebCenter Sites)
- [CVE-2026-61034](https://cve.now/CVE-2026-61034.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.1, Oracle WebCenter Sites)
- [CVE-2026-61033](https://cve.now/CVE-2026-61033.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.6, Oracle WebCenter Sites)
- [CVE-2026-61032](https://cve.now/CVE-2026-61032.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61029](https://cve.now/CVE-2026-61029.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.0, Oracle WebCenter Sites)
- [CVE-2026-61022](https://cve.now/CVE-2026-61022.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61021](https://cve.now/CVE-2026-61021.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.9, Oracle WebCenter Sites)
- [CVE-2026-61018](https://cve.now/CVE-2026-61018.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.8, Oracle WebCenter Sites)
- [CVE-2026-61017](https://cve.now/CVE-2026-61017.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.8, Oracle WebCenter Sites)
- [CVE-2026-61016](https://cve.now/CVE-2026-61016.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.2, Oracle WebCenter Sites)
- [CVE-2026-61011](https://cve.now/CVE-2026-61011.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 8.2, Oracle WebCenter Sites)
- [CVE-2026-61008](https://cve.now/CVE-2026-61008.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.1, Oracle WebCenter Sites)
- [CVE-2026-61007](https://cve.now/CVE-2026-61007.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 7.5, Oracle WebCenter Sites)
- [CVE-2026-61003](https://cve.now/CVE-2026-61003.md): Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). (CVSS 9.9, Oracle Managed File Transfer)
- [CVE-2026-61002](https://cve.now/CVE-2026-61002.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine). (CVSS 8.8, Oracle SOA Suite)
- [CVE-2026-61001](https://cve.now/CVE-2026-61001.md): Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). (CVSS 9.6, Oracle Web Services Manager)
- [CVE-2026-60998](https://cve.now/CVE-2026-60998.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory). (CVSS 8.0, Oracle Identity Manager Connector)
- [CVE-2026-60996](https://cve.now/CVE-2026-60996.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). (CVSS 8.7, Oracle Identity Manager Connector)
- [CVE-2026-60995](https://cve.now/CVE-2026-60995.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 9.9, Oracle Identity Manager Connector)
- [CVE-2026-60994](https://cve.now/CVE-2026-60994.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 7.2, Oracle Identity Manager Connector)
- [CVE-2026-60993](https://cve.now/CVE-2026-60993.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Identity Manager Connector)
- [CVE-2026-60992](https://cve.now/CVE-2026-60992.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle Identity Manager Connector)
- [CVE-2026-60991](https://cve.now/CVE-2026-60991.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 7.8, Oracle Identity Manager Connector)
- [CVE-2026-60990](https://cve.now/CVE-2026-60990.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). (CVSS 9.9, Oracle Identity Manager Connector)
- [CVE-2026-60983](https://cve.now/CVE-2026-60983.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.7, Oracle WebCenter Content)
- [CVE-2026-60981](https://cve.now/CVE-2026-60981.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60980](https://cve.now/CVE-2026-60980.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60977](https://cve.now/CVE-2026-60977.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60976](https://cve.now/CVE-2026-60976.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Scripting)
- [CVE-2026-60975](https://cve.now/CVE-2026-60975.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 7.5, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60971](https://cve.now/CVE-2026-60971.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60970](https://cve.now/CVE-2026-60970.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60969](https://cve.now/CVE-2026-60969.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.7, Oracle Unified Directory)
- [CVE-2026-60967](https://cve.now/CVE-2026-60967.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). (CVSS 8.8, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60961](https://cve.now/CVE-2026-60961.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.0, Oracle WebCenter Content)
- [CVE-2026-60958](https://cve.now/CVE-2026-60958.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60956](https://cve.now/CVE-2026-60956.md): Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Edwards (component: Payroll). (CVSS 7.5, Oracle JD Edwards EnterpriseOne US Payroll)
- [CVE-2026-60955](https://cve.now/CVE-2026-60955.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.2, Oracle WebCenter Content)
- [CVE-2026-60954](https://cve.now/CVE-2026-60954.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60949](https://cve.now/CVE-2026-60949.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.1, Oracle WebCenter Content)
- [CVE-2026-60947](https://cve.now/CVE-2026-60947.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60946](https://cve.now/CVE-2026-60946.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60944](https://cve.now/CVE-2026-60944.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.2, Oracle WebCenter Content)
- [CVE-2026-60935](https://cve.now/CVE-2026-60935.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60934](https://cve.now/CVE-2026-60934.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60933](https://cve.now/CVE-2026-60933.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.4, Oracle WebCenter Content)
- [CVE-2026-60928](https://cve.now/CVE-2026-60928.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.4, Oracle WebCenter Content)
- [CVE-2026-60921](https://cve.now/CVE-2026-60921.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.8, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60916](https://cve.now/CVE-2026-60916.md): Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). (CVSS 9.9, Oracle WebCenter Enterprise Capture)
- [CVE-2026-60915](https://cve.now/CVE-2026-60915.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 7.4, Oracle Helidon)
- [CVE-2026-60914](https://cve.now/CVE-2026-60914.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.5, Oracle Unified Directory)
- [CVE-2026-60909](https://cve.now/CVE-2026-60909.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.6, Oracle WebCenter Content)
- [CVE-2026-60906](https://cve.now/CVE-2026-60906.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 7.5, Oracle WebCenter Content)
- [CVE-2026-60905](https://cve.now/CVE-2026-60905.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 9.6, Oracle WebCenter Content)
- [CVE-2026-60903](https://cve.now/CVE-2026-60903.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 8.7, Oracle WebCenter Content)
- [CVE-2026-60902](https://cve.now/CVE-2026-60902.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo). (CVSS 7.0, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60895](https://cve.now/CVE-2026-60895.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 6.8, Oracle Unified Directory)
- [CVE-2026-60889](https://cve.now/CVE-2026-60889.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.5, Oracle Unified Directory)
- [CVE-2026-60884](https://cve.now/CVE-2026-60884.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). (CVSS 4.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60883](https://cve.now/CVE-2026-60883.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PeopleCode). (CVSS 7.2, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60879](https://cve.now/CVE-2026-60879.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration Manager). (CVSS 8.8, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60873](https://cve.now/CVE-2026-60873.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). (CVSS 7.2, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60866](https://cve.now/CVE-2026-60866.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 6.5, Oracle Service Delivery Platform)
- [CVE-2026-60865](https://cve.now/CVE-2026-60865.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 6.8, Oracle Service Delivery Platform)
- [CVE-2026-60861](https://cve.now/CVE-2026-60861.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 9.6, Oracle Service Delivery Platform)
- [CVE-2026-60860](https://cve.now/CVE-2026-60860.md): Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). (CVSS 8.7, Oracle Service Delivery Platform)
- [CVE-2026-60858](https://cve.now/CVE-2026-60858.md): Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). (CVSS 9.8, Oracle Hyperion Calculation Manager)
- [CVE-2026-60856](https://cve.now/CVE-2026-60856.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Install and Packaging). (CVSS 7.4, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60853](https://cve.now/CVE-2026-60853.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). (CVSS 3.7, Oracle Helidon)
- [CVE-2026-60850](https://cve.now/CVE-2026-60850.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 7.5, Oracle Unified Directory)
- [CVE-2026-60849](https://cve.now/CVE-2026-60849.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.5, Oracle Unified Directory)
- [CVE-2026-60841](https://cve.now/CVE-2026-60841.md): Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). (CVSS 8.5, Oracle Unified Directory)
- [CVE-2026-60831](https://cve.now/CVE-2026-60831.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). (CVSS 8.1, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60830](https://cve.now/CVE-2026-60830.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). (CVSS 6.5, Oracle Workflow)
- [CVE-2026-60822](https://cve.now/CVE-2026-60822.md): Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Agent). (CVSS 7.8, Oracle Enterprise Manager for Systems Infrastructure)
- [CVE-2026-60821](https://cve.now/CVE-2026-60821.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 9.8, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60820](https://cve.now/CVE-2026-60820.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 7.4, Oracle Siebel CRM Integration)
- [CVE-2026-60808](https://cve.now/CVE-2026-60808.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). (CVSS 7.5, Oracle Siebel Apps - Marketing)
- [CVE-2026-60803](https://cve.now/CVE-2026-60803.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 7.4, Oracle Siebel Apps - Marketing)
- [CVE-2026-60798](https://cve.now/CVE-2026-60798.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). (CVSS 8.5, Oracle Siebel CRM Deployment)
- [CVE-2026-60797](https://cve.now/CVE-2026-60797.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 7.4, Oracle Siebel CRM Integration)
- [CVE-2026-60796](https://cve.now/CVE-2026-60796.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 8.2, Oracle Siebel CRM Integration)
- [CVE-2026-60792](https://cve.now/CVE-2026-60792.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.4, Oracle Siebel CRM Deployment)
- [CVE-2026-60791](https://cve.now/CVE-2026-60791.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). (CVSS 8.1, Oracle Siebel CRM Deployment)
- [CVE-2026-60782](https://cve.now/CVE-2026-60782.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 9.8, Oracle Payments)
- [CVE-2026-60781](https://cve.now/CVE-2026-60781.md): Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). (CVSS 7.1, Oracle Payments)
- [CVE-2026-60779](https://cve.now/CVE-2026-60779.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 8.1, Oracle Siebel Apps - Marketing)
- [CVE-2026-60769](https://cve.now/CVE-2026-60769.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle General Ledger)
- [CVE-2026-60767](https://cve.now/CVE-2026-60767.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 8.8, Oracle Siebel Apps - Marketing)
- [CVE-2026-60766](https://cve.now/CVE-2026-60766.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 7.4, Oracle Siebel CRM Integration)
- [CVE-2026-60765](https://cve.now/CVE-2026-60765.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 7.5, Oracle Siebel Apps - Marketing)
- [CVE-2026-60759](https://cve.now/CVE-2026-60759.md): Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.4, Oracle Internet Procurement Connector)
- [CVE-2026-60758](https://cve.now/CVE-2026-60758.md): Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI). (CVSS 8.5, Oracle Siebel Artificial Intelligence)
- [CVE-2026-60757](https://cve.now/CVE-2026-60757.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Search). (CVSS 8.1, Oracle Siebel CRM End User)
- [CVE-2026-60754](https://cve.now/CVE-2026-60754.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 9.1, Oracle Siebel Apps - Marketing)
- [CVE-2026-60753](https://cve.now/CVE-2026-60753.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). (CVSS 7.8, Oracle Siebel CRM Deployment)
- [CVE-2026-60752](https://cve.now/CVE-2026-60752.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 7.1, Oracle Siebel Apps - Marketing)
- [CVE-2026-60751](https://cve.now/CVE-2026-60751.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 8.8, Oracle Siebel Apps - Marketing)
- [CVE-2026-60748](https://cve.now/CVE-2026-60748.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle General Ledger)
- [CVE-2026-60742](https://cve.now/CVE-2026-60742.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 8.1, Oracle PeopleSoft Enterprise PeopleTools)
- [CVE-2026-60737](https://cve.now/CVE-2026-60737.md): Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). (CVSS 9.1, Oracle Web Services Manager)
- [CVE-2026-60733](https://cve.now/CVE-2026-60733.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). (CVSS 7.7, Oracle WebCenter Portal)
- [CVE-2026-60731](https://cve.now/CVE-2026-60731.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). (CVSS 8.8, Oracle WebCenter Portal)
- [CVE-2026-60730](https://cve.now/CVE-2026-60730.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). (CVSS 9.9, Oracle WebCenter Portal)
- [CVE-2026-60729](https://cve.now/CVE-2026-60729.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). (CVSS 8.8, Oracle WebCenter Portal)
- [CVE-2026-60728](https://cve.now/CVE-2026-60728.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). (CVSS 9.1, Oracle WebCenter Portal)
- [CVE-2026-60727](https://cve.now/CVE-2026-60727.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.8, Oracle Identity Manager)
- [CVE-2026-60726](https://cve.now/CVE-2026-60726.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.8, Oracle Access Manager)
- [CVE-2026-60722](https://cve.now/CVE-2026-60722.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager)
- [CVE-2026-60721](https://cve.now/CVE-2026-60721.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.8, Oracle Identity Manager)
- [CVE-2026-60720](https://cve.now/CVE-2026-60720.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 9.9, Oracle Identity Manager)
- [CVE-2026-60716](https://cve.now/CVE-2026-60716.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager)
- [CVE-2026-60715](https://cve.now/CVE-2026-60715.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager)
- [CVE-2026-60707](https://cve.now/CVE-2026-60707.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security). (CVSS 8.7, Oracle Identity Manager)
- [CVE-2026-60702](https://cve.now/CVE-2026-60702.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.9, Oracle WebLogic Server)
- [CVE-2026-60699](https://cve.now/CVE-2026-60699.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.6, Oracle WebLogic Server)
- [CVE-2026-60698](https://cve.now/CVE-2026-60698.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60696](https://cve.now/CVE-2026-60696.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60693](https://cve.now/CVE-2026-60693.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle General Ledger)
- [CVE-2026-60682](https://cve.now/CVE-2026-60682.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). (CVSS 6.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-60680](https://cve.now/CVE-2026-60680.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle WebLogic Server)
- [CVE-2026-60679](https://cve.now/CVE-2026-60679.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2026-60672](https://cve.now/CVE-2026-60672.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2026-60592](https://cve.now/CVE-2026-60592.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). (CVSS 8.2, Oracle MySQL Cluster)
- [CVE-2026-60591](https://cve.now/CVE-2026-60591.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). (CVSS 9.1, Oracle Hospitality Simphony)
- [CVE-2026-60590](https://cve.now/CVE-2026-60590.md): Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). (CVSS 7.5, Oracle Hospitality Simphony)
- [CVE-2026-60589](https://cve.now/CVE-2026-60589.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit (CVSS 3.7, Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente…)
- [CVE-2026-60415](https://cve.now/CVE-2026-60415.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 8.1, Oracle WebLogic Server)
- [CVE-2026-60414](https://cve.now/CVE-2026-60414.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.8, Oracle Outside In Technology)
- [CVE-2026-60413](https://cve.now/CVE-2026-60413.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.8, Oracle Outside In Technology)
- [CVE-2026-60412](https://cve.now/CVE-2026-60412.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.8, Oracle Outside In Technology)
- [CVE-2026-60393](https://cve.now/CVE-2026-60393.md): Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). (CVSS 7.5, Oracle Hyperion Infrastructure Technology)
- [CVE-2026-60392](https://cve.now/CVE-2026-60392.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). (CVSS 7.8, Oracle Outside In Technology)
- [CVE-2026-60391](https://cve.now/CVE-2026-60391.md): Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). (CVSS 7.5, Oracle Hyperion Financial Reporting)
- [CVE-2026-55426](https://cve.now/CVE-2026-55426.md): linuxfabrik-lib: Local privilege escalation using embedded command (CVSS 7.8, Linuxfabrik monitoring-plugins · Linuxfabrik lib +1)
- [CVE-2026-12632](https://cve.now/CVE-2026-12632.md): Out-of-bounds read in Zephyr PTP message parsing from unvalidated message type (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-12631](https://cve.now/CVE-2026-12631.md): Broken access-control denial in k\_thread\_join/k\_thread\_abort syscall validation in Zephyr kernel (CVSS 6.5, zephyrproject zephyr)
- [CVE-2026-53759](https://cve.now/CVE-2026-53759.md): linuxfabrik-lib: Insecure creation of SQLite databases (CVSS 2.0, Linuxfabrik monitoring-plugins · linuxfabrik-lib)
- [CVE-2026-52817](https://cve.now/CVE-2026-52817.md): Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation (CVSS 7.0, Linuxfabrik monitoring-plugins · linuxfabrik-lib)
- [CVE-2026-53457](https://cve.now/CVE-2026-53457.md): Blueprint Studio terminal command working directory not bounded to config directory (CVSS 5.1, ha-china blueprint-studio)
- [CVE-2026-53456](https://cve.now/CVE-2026-53456.md): Blueprint Studio terminal SSH private key written to disk (CVSS 5.6, ha-china blueprint-studio)
- [CVE-2026-53455](https://cve.now/CVE-2026-53455.md): Blueprint Studio Git credential helper command injection (CVSS 8.6, ha-china blueprint-studio)
- [CVE-2026-53454](https://cve.now/CVE-2026-53454.md): Blueprint Studio stored Git credentials in plaintext Git credential store (CVSS 6.9, ha-china blueprint-studio)
- [CVE-2026-53453](https://cve.now/CVE-2026-53453.md): Blueprint Studio API authorization bypass for non-admin Home Assistant users (CVSS 8.7, ha-china blueprint-studio)
- [CVE-2026-53458](https://cve.now/CVE-2026-53458.md): Blueprint Studio API exposed internal exception details (CVSS 5.3, ha-china blueprint-studio)
- [CVE-2026-15571](https://cve.now/CVE-2026-15571.md): Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client (CVSS 7.3, Red Hat build of Keycloak · Red Hat Data Grid +2)
- [CVE-2026-76045](https://cve.now/CVE-2026-76045.md): Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-76038](https://cve.now/CVE-2026-76038.md): Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-76047](https://cve.now/CVE-2026-76047.md): Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-76041](https://cve.now/CVE-2026-76041.md): Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a cr (CVSS 4.3, Google Chrome)
- [CVE-2026-76043](https://cve.now/CVE-2026-76043.md): Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-76046](https://cve.now/CVE-2026-76046.md): Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer p (CVSS 8.3, Google Chrome)
- [CVE-2026-76042](https://cve.now/CVE-2026-76042.md): Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer pro (CVSS 3.1, Google Chrome)
- [CVE-2026-76035](https://cve.now/CVE-2026-76035.md): Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code (CVSS 9.6, Google Chrome)
- [CVE-2026-76040](https://cve.now/CVE-2026-76040.md): Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to exec (CVSS 8.8, Google Chrome)
- [CVE-2026-76039](https://cve.now/CVE-2026-76039.md): Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social en (CVSS 6.5, Google Chrome)
- [CVE-2026-76044](https://cve.now/CVE-2026-76044.md): Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potenti (CVSS 8.3, Google Chrome)
- [CVE-2026-76037](https://cve.now/CVE-2026-76037.md): Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute (CVSS 8.4, Google Chrome)
- [CVE-2026-76033](https://cve.now/CVE-2026-76033.md): Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer pro (CVSS 4.2, Google Chrome)
- [CVE-2026-76036](https://cve.now/CVE-2026-76036.md): Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside t (CVSS 9.6, Google Chrome)
- [CVE-2026-76034](https://cve.now/CVE-2026-76034.md): Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-16732](https://cve.now/CVE-2026-16732.md): fastify vulnerable to X-Forwarded-\* spoofing under trustProxy hop-count (CVSS 6.1, fastify)
- [CVE-2026-18504](https://cve.now/CVE-2026-18504.md): fastify vulnerable to schema validation bypass via root primitive coercion mismatch (CVSS 5.4, fastify)
- [CVE-2026-55593](https://cve.now/CVE-2026-55593.md): Froxlor: CSRF Vulnerability in Froxlor AJAX Endpoint — Missing Cross-Site Request Forgery Protection (CVSS 6.5, froxlor · froxlor/froxlor)
- [CVE-2026-54347](https://cve.now/CVE-2026-54347.md): Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover (CVSS 8.7, froxlor · froxlor/froxlor)
- [CVE-2026-54348](https://cve.now/CVE-2026-54348.md): Froxlor: Second-Order SQL Injection via \`Admins.add\` \`ipaddress\` Parameter Allows Full Database Exfiltration (CVSS 7.2, froxlor · froxlor/froxlor)
- [CVE-2026-54543](https://cve.now/CVE-2026-54543.md): Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields (CVSS 5.4, froxlor · froxlor/froxlor)
- [CVE-2026-62988](https://cve.now/CVE-2026-62988.md): Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints (CVSS 9.0, froxlor · froxlor/froxlor)
- [CVE-2026-52793](https://cve.now/CVE-2026-52793.md): Froxlor: API Authentication bypasses 2FA Authentication (CVSS 8.1, froxlor · froxlor/froxlor)
- [CVE-2026-67442](https://cve.now/CVE-2026-67442.md): FUXA Business Logic Flaw: Role Deletion Without User Assignment Cleanup (CVSS 2.0, frangoteam FUXA)
- [CVE-2026-65984](https://cve.now/CVE-2026-65984.md): FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions (CVSS 7.5, frangoteam FUXA)
- [CVE-2026-67443](https://cve.now/CVE-2026-67443.md): FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution) (CVSS 9.2, frangoteam FUXA)
- [CVE-2026-65985](https://cve.now/CVE-2026-65985.md): FUXA: SSRF hardening for \`device-webapi-request\` (CVSS 6.0, frangoteam FUXA)
- [CVE-2026-67440](https://cve.now/CVE-2026-67440.md): FUXA: Unauthenticated Socket.IO read events (CVSS 6.9, frangoteam FUXA)
- [CVE-2026-47721](https://cve.now/CVE-2026-47721.md): FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions (CVSS 6.3, frangoteam FUXA · fuxa-server)
- [CVE-2026-47719](https://cve.now/CVE-2026-47719.md): FUXA: Unauthenticated SSRF via Socket.IO DEVICE\_WEBAPI\_REQUEST and DEVICE\_PROPERTY with response reading (CVSS 8.2, frangoteam FUXA · fuxa-server)
- [CVE-2026-47720](https://cve.now/CVE-2026-47720.md): FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString (CVSS 5.3, frangoteam FUXA · fuxa-server)
- [CVE-2026-59915](https://cve.now/CVE-2026-59915.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. (CVSS 7.3, Dell Alienware Command Center)
- [CVE-2026-76032](https://cve.now/CVE-2026-76032.md): Pydio Cells 5.0.0 to 5.0.2 - Missing Authorization on the Share Link REST Handler (CVSS 5.3, pydio cells)
- [CVE-2026-49500](https://cve.now/CVE-2026-49500.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following') (CVSS 6.0, Dell Alienware Command Center (AWCC)
- [CVE-2026-75877](https://cve.now/CVE-2026-75877.md): TRENDnet TV-IP751WIC alphapd FUN\_0043372C stack-based overflow (CVSS 9.4, TRENDnet TV-IP751WIC)
- [CVE-2026-12520](https://cve.now/CVE-2026-12520.md): Stack buffer overflow and off-by-one writes in Zephyr HL7800 modem AT response handlers (CVSS 6.4, zephyrproject zephyr)
- [CVE-2026-75936](https://cve.now/CVE-2026-75936.md): Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java (CVSS 7.5, Amazon Ion Java)
- [CVE-2026-75935](https://cve.now/CVE-2026-75935.md): Memory-amplification denial of service via declared-length preallocation in Amazon ion-java (CVSS 7.5, Amazon Ion Java)
- [CVE-2026-52829](https://cve.now/CVE-2026-52829.md): ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book (CVSS 7.5, ZcashFoundation zebra · zebra-network +1)
- [CVE-2026-52736](https://cve.now/CVE-2026-52736.md): ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache (CVSS 8.7, ZcashFoundation zebra · zebra-state +1)
- [CVE-2026-52732](https://cve.now/CVE-2026-52732.md): ZEBRA: Mempool transaction admission denial via single-peer inbound queue saturation (CVSS 5.3, ZcashFoundation zebra · zebrad)
- [CVE-2026-52731](https://cve.now/CVE-2026-52731.md): ZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplate (CVSS 6.5, ZcashFoundation zebra · ZcashFoundation zebra-rpc +2)
- [CVE-2026-52733](https://cve.now/CVE-2026-52733.md): ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop\_tip (CVSS 6.5, ZcashFoundation zebra · ZcashFoundation zebra-state +2)
- [CVE-2026-52738](https://cve.now/CVE-2026-52738.md): ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks (CVSS 6.9, ZcashFoundation zebra · ZcashFoundation zebra-state +2)
- [CVE-2026-52735](https://cve.now/CVE-2026-52735.md): ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser (CVSS 9.3, ZcashFoundation zebra · zebra-script +1)
- [CVE-2026-52739](https://cve.now/CVE-2026-52739.md): ZEBRA: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection (CVSS 5.9, ZcashFoundation zebra · ZcashFoundation zebra-state +2)
- [CVE-2026-52734](https://cve.now/CVE-2026-52734.md): ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel\_handles retention (CVSS 5.3, ZcashFoundation zebra · zebrad)
- [CVE-2026-52737](https://cve.now/CVE-2026-52737.md): ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block (CVSS 5.3, ZcashFoundation zebra · ZcashFoundation zebra-consensus +2)
- [CVE-2026-75876](https://cve.now/CVE-2026-75876.md): xianrendzw EasyReport Move Operations ModuleController.java sql injection (CVSS 5.3, xianrendzw EasyReport)
- [CVE-2026-71417](https://cve.now/CVE-2026-71417.md): Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it (CVSS 7.3, Netflix lemur · lemur)
- [CVE-2026-19671](https://cve.now/CVE-2026-19671.md): Improper handling of highly compressed data (data amplification) in CISA Malcolm (CVSS 7.1, CISAgov Malcolm)
- [CVE-2026-73529](https://cve.now/CVE-2026-73529.md): Plainpad Missing Rate Limiting via POST /v1/sessions (CVSS 6.9, alextselegidis plainpad)
- [CVE-2026-71322](https://cve.now/CVE-2026-71322.md): Lemur: Missing authorization check on POST /certificates/\<id\>/export for plugins with requires\_key = False (CVSS 4.3, Netflix lemur · lemur)
- [CVE-2026-19670](https://cve.now/CVE-2026-19670.md): Incorrect Authorization in CISA Malcolm (CVSS 5.3, CISAgov Malcolm)
- [CVE-2026-71317](https://cve.now/CVE-2026-71317.md): Lemur: Sub-CA creation never checks \`AuthorityPermission\` on the parent authority (CVSS 6.5, Netflix lemur · lemur)
- [CVE-2026-70666](https://cve.now/CVE-2026-70666.md): Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs (CVSS 7.4, Netflix lemur · lemur)
- [CVE-2026-71303](https://cve.now/CVE-2026-71303.md): Lemur: Incomplete fix for CVE-2026-55166 -- ACME authority update endpoint allows non-admin to replace \`acme\_url\` with internal IP, bypassing allowlist (CVSS 7.7, Netflix lemur · lemur)
- [CVE-2026-71307](https://cve.now/CVE-2026-71307.md): Lemur: Authenticated low-privilege users can read plaintext destination credentials (SFTP password / private-key passphrase) via the destinations API (CVSS 7.7, Netflix lemur · lemur)
- [CVE-2026-71308](https://cve.now/CVE-2026-71308.md): Lemur: Unchecked \`replaces\[\]\` lets any user silence notifications and hijack auto-rotation for arbitrary certificates (CVSS 8.1, Netflix lemur · lemur)
- [CVE-2026-70667](https://cve.now/CVE-2026-70667.md): Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for CVE-2026-55162) (CVSS 6.3, Netflix lemur · lemur)
- [CVE-2026-55164](https://cve.now/CVE-2026-55164.md): Lemur: Plaintext password storage in Lemur user-update path (CVSS 4.9, Netflix lemur · lemur)
- [CVE-2026-55162](https://cve.now/CVE-2026-55162.md): Lemur: Post-authentication SSRF via certificate verification - attacker-controlled CRL and OCSP URLs in uploaded certificates (CVSS 6.3, Netflix lemur · lemur)
- [CVE-2026-55166](https://cve.now/CVE-2026-55166.md): Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme\_url SSRF and creator-equality IDOR (CVSS 9.9, Netflix lemur · lemur)
- [CVE-2026-55163](https://cve.now/CVE-2026-55163.md): Lemur: Privilege escalation via PUT /api/1/roles/\<id\> — non-admin role members can rewrite role membership (CVSS 6.3, Netflix lemur · lemur)
- [CVE-2026-55165](https://cve.now/CVE-2026-55165.md): Lemur : JWT verifier trusts attacker-supplied alg from token header — defense-in-depth gap; chain-dependent ATO with secret disclosure (CVSS 4.8, Netflix lemur · lemur)
- [CVE-2026-17106](https://cve.now/CVE-2026-17106.md): Tar extraction in moby/go-archive can write outside the destination directory via link following (CVSS 7.1, moby go-archive · Docker Sandboxes +5)
- [CVE-2025-9211](https://cve.now/CVE-2025-9211.md): Cross-site scripting in Otalio Ship Property Management System (CVSS 6.7, Otalio Ship Property Management System)
- [CVE-2025-9210](https://cve.now/CVE-2025-9210.md): Missing JSON Web Token signature validation in Otalio Ship Property Management System (CVSS 8.1, Otalio Ship Property Management System)
- [CVE-2026-47630](https://cve.now/CVE-2026-47630.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. (CVSS 5.5, NVIDIA Triton Inference Server)
- [CVE-2026-47629](https://cve.now/CVE-2026-47629.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. (CVSS 7.5, NVIDIA Triton Inference Server)
- [CVE-2026-47628](https://cve.now/CVE-2026-47628.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. (CVSS 7.5, NVIDIA Triton Inference Server)
- [CVE-2026-47627](https://cve.now/CVE-2026-47627.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. (CVSS 9.8, NVIDIA Triton Inference Server)
- [CVE-2026-47606](https://cve.now/CVE-2026-47606.md): NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. (CVSS 6.5, NVIDIA Triton Inference Server)
- [CVE-2026-65959](https://cve.now/CVE-2026-65959.md): Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data (CVSS 5.3, vitessio vitess · vitess.io/vitess)
- [CVE-2026-24185](https://cve.now/CVE-2026-24185.md): NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is en (CVSS 7.1, NVIDIA NVOS)
- [CVE-2026-24184](https://cve.now/CVE-2026-24184.md): NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacke (CVSS 7.5, NVIDIA Cumulus Linux GA · NVIDIA Cumulus Linux LTS)
- [CVE-2026-24183](https://cve.now/CVE-2026-24183.md): NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege mana (CVSS 7.8, NVIDIA Cumulus Linux GA)
- [CVE-2026-71551](https://cve.now/CVE-2026-71551.md): Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist (CVSS 7.8, super-productivity)
- [CVE-2026-69160](https://cve.now/CVE-2026-69160.md): OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API (CVSS 6.5, OpenListTeam OpenList · github.com/OpenListTeam/OpenList… +2)
- [CVE-2026-48508](https://cve.now/CVE-2026-48508.md): Lemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission (CVSS 8.8, Netflix lemur · lemur)
- [CVE-2026-75130](https://cve.now/CVE-2026-75130.md): Context7 2.1.2 Prompt Injection via Custom AI Instructions (CVSS 6.4, Uptash Context7)
- [CVE-2026-50167](https://cve.now/CVE-2026-50167.md): Kurrier: Authenticated cross-user authorization bypass in Kurrier API (CVSS 5.3, kurrier-org kurrier)
- [CVE-2026-49452](https://cve.now/CVE-2026-49452.md): WeasyPrint: CSS Injection via Presentational Hints (CVSS 6.5, Kozea WeasyPrint · weasyprint)
- [CVE-2026-73502](https://cve.now/CVE-2026-73502.md): kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a \`content\` parameter whose media type has no schema (CVSS 5.3, getkin kin-openapi · github.com/getkin/kin-openapi)
- [CVE-2026-61696](https://cve.now/CVE-2026-61696.md): Forem: Stored XSS in Admin Abuse Report Rendering (CVSS 6.3, forem)
- [CVE-2026-71880](https://cve.now/CVE-2026-71880.md): Server-side template injection in Integrated Publishing Toolkit (CVSS 7.6, GBIF Integrated Publishing Toolkit)
- [CVE-2026-75625](https://cve.now/CVE-2026-75625.md): Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass (CVSS 9.1, uber kraken)
- [CVE-2026-53533](https://cve.now/CVE-2026-53533.md): aiosmtplib: SMTP command injection via CR/LF in sender/recipient address (CVSS 6.9, cole aiosmtplib · aiosmtplib)
- [CVE-2026-50161](https://cve.now/CVE-2026-50161.md): libre: Integer overflow in websock\_decode() masked frame length check leads to heap buffer overflow (CVSS 9.3, baresip re)
- [CVE-2026-50143](https://cve.now/CVE-2026-50143.md): Actor MCP path authority injection leaks Apify token (CVSS 8.1, apify-mcp-server · @apify/actors-mcp-server)
- [CVE-2026-32657](https://cve.now/CVE-2026-32657.md): Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version (CVSS 7.3, Dell AppSync · Dell Metro Node +7)
- [CVE-2026-68923](https://cve.now/CVE-2026-68923.md): MobSF: CSRF checks not enforced after Django migration (CVSS 6.5, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2026-68927](https://cve.now/CVE-2026-68927.md): MobSF: SSRF port restriction bypass in assetlinks\_check (CVSS 3.0, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2026-68922](https://cve.now/CVE-2026-68922.md): MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads (CVSS 5.5, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2026-68924](https://cve.now/CVE-2026-68924.md): MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction (CVSS 4.9, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2026-71879](https://cve.now/CVE-2026-71879.md): Authentication bypass in Integrated Publishing Toolkit (CVSS 9.1, GBIF Integrated Publishing Toolkit)
- [CVE-2026-71878](https://cve.now/CVE-2026-71878.md): Authentication bypass in Integrated Publishing Toolkit (CVSS 9.2, GBIF Integrated Publishing Toolkit)
- [CVE-2026-54570](https://cve.now/CVE-2026-54570.md): AngleSharp: HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass (CVSS 6.9, AngleSharp)
- [CVE-2026-54552](https://cve.now/CVE-2026-54552.md): sh \_uid does not drop supplementary groups (incomplete privilege drop) (CVSS 7.9, amoffat sh · sh)
- [CVE-2026-63640](https://cve.now/CVE-2026-63640.md): MagicMirror socket payload secret placeholder expansion can disclose SECRET\_\* environment variables (CVSS 4.3, MagicMirrorOrg MagicMirror · magicmirror)
- [CVE-2026-66780](https://cve.now/CVE-2026-66780.md): Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity (CVSS 6.5, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-74046](https://cve.now/CVE-2026-74046.md): Wazuh 4.4.0 \< 4.14.7 DoS via fdecompress\_files() Zip Bomb (CVSS 6.9, wazuh-manager)
- [CVE-2026-74044](https://cve.now/CVE-2026-74044.md): Wazuh 4.0.0 \< 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello (CVSS 7.0, wazuh-manager)
- [CVE-2026-74039](https://cve.now/CVE-2026-74039.md): Wazuh 4.0.0 \< 4.14.7 API DoS via Deeply Nested JSON auth\_context (CVSS 7.1, wazuh-manager)
- [CVE-2026-74038](https://cve.now/CVE-2026-74038.md): Wazuh 4.0.0 \< 4.14.6 Path Traversal DoS via Agent Enrollment (CVSS 7.0, wazuh-manager)
- [CVE-2026-67262](https://cve.now/CVE-2026-67262.md): Dell PowerStore contains a Missing Authorization vulnerability. (CVSS 8.1, Dell PowerStore)
- [CVE-2026-63642](https://cve.now/CVE-2026-63642.md): MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery (CVSS 6.3, MagicMirrorOrg MagicMirror · magicmirror)
- [CVE-2026-63643](https://cve.now/CVE-2026-63643.md): MagicMirror: ssrf calendar .js (CVSS 6.3, MagicMirrorOrg MagicMirror · magicmirror)
- [CVE-2026-63641](https://cve.now/CVE-2026-63641.md): MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions (CVSS 2.3, MagicMirrorOrg MagicMirror · magicmirror)
- [CVE-2026-44472](https://cve.now/CVE-2026-44472.md): Saleor: Account pre-hijacking vulnerability due to unverified anonymous order merge (CVSS 8.1, saleor)
- [CVE-2026-48744](https://cve.now/CVE-2026-48744.md): Saleor: Anonymous users can modify channel settings via \`channelUpdate\` due to \`all(\[\])\` bypass in permission check (CVSS 6.5, saleor)
- [CVE-2026-66783](https://cve.now/CVE-2026-66783.md): Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref (CVSS 4.4, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-66782](https://cve.now/CVE-2026-66782.md): Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps (CVSS 5.8, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-66781](https://cve.now/CVE-2026-66781.md): Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication (CVSS 5.4, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-75897](https://cve.now/CVE-2026-75897.md): Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards (CVSS 7.5, OpenSearch Dashboards · AWS Amazon OpenSearch Service)
- [CVE-2026-18963](https://cve.now/CVE-2026-18963.md): Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass (CVSS 9.1, Red Hat build of Keycloak · Red Hat JBoss Enterprise App… +2)
- [CVE-2026-57580](https://cve.now/CVE-2026-57580.md): authentik: Account Takeover via SAML NameID Comment Truncation (CVSS 9.4, goauthentik authentik)
- [CVE-2026-55106](https://cve.now/CVE-2026-55106.md): authentik: Unauthenticated LDAP directory data disclosure (CVSS 5.3, goauthentik authentik)
- [CVE-2026-61574](https://cve.now/CVE-2026-61574.md): authentik RAC: access any endpoint via an unrelated application (CVSS 8.8, goauthentik authentik)
- [CVE-2026-54730](https://cve.now/CVE-2026-54730.md): authentik: Authentication Flow Bypass via Unguarded challenge\_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView (CVSS 8.6, goauthentik authentik)
- [CVE-2026-70415](https://cve.now/CVE-2026-70415.md): Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. (CVSS 8.1, Dell PowerStore · Della PowerStore)
- [CVE-2026-50577](https://cve.now/CVE-2026-50577.md): ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter (CVSS 7.4, fbeta-GmbH ePA3-Service-OpenSource)
- [CVE-2026-50578](https://cve.now/CVE-2026-50578.md): ePA 3.x Integration: TLS Certificate Verification Universally Disabled (CVSS 7.5, fbeta-GmbH ePA3-Service-OpenSource)
- [CVE-2026-52723](https://cve.now/CVE-2026-52723.md): ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust (CVSS 9.1, fbeta-GmbH ePA3-Service-OpenSource)
- [CVE-2026-50576](https://cve.now/CVE-2026-50576.md): ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests (CVSS 6.8, fbeta-GmbH ePA3-Service-OpenSource)
- [CVE-2026-67271](https://cve.now/CVE-2026-67271.md): Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. (CVSS 9.8, Dell PowerStore)
- [CVE-2026-50126](https://cve.now/CVE-2026-50126.md): adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference (CVSS 4.0, KNMI adaguc-server)
- [CVE-2026-19869](https://cve.now/CVE-2026-19869.md): Privilege Escalation via Dropped Field-Level @authentication (CVSS 7.6, neo4j graphql)
- [CVE-2026-61634](https://cve.now/CVE-2026-61634.md): RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame\_max (CVSS 0.0, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-63336](https://cve.now/CVE-2026-63336.md): RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM (CVSS 5.1, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-75924](https://cve.now/CVE-2026-75924.md): Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval (CVSS 8.7, Red Hat Multicluster Engine for Kubernetes · Red Hat Advanc…)
- [CVE-2026-63337](https://cve.now/CVE-2026-63337.md): RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading (CVSS 7.5, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-69220](https://cve.now/CVE-2026-69220.md): RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS (CVSS 8.7, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-69219](https://cve.now/CVE-2026-69219.md): RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation (CVSS 8.7, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-63335](https://cve.now/CVE-2026-63335.md): RabbitMQ Java client malformed body frame triggers raw command assembler exception (CVSS 6.3, rabbitmq-java-client · com.rabbitmq:amqp-client)
- [CVE-2026-49223](https://cve.now/CVE-2026-49223.md): Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' products (CVSS 7.6, givanz Vvveb)
- [CVE-2026-49224](https://cve.now/CVE-2026-49224.md): Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions (CVSS 8.3, givanz Vvveb)
- [CVE-2026-49222](https://cve.now/CVE-2026-49222.md): Vvveb product question authorization bypass allows Vendors to read, approve, edit, or delete questions under other Vendors' products (CVSS 7.6, givanz Vvveb)
- [CVE-2026-49225](https://cve.now/CVE-2026-49225.md): Vvveb product revision authorization bypass allows Vendors to read, restore, or delete other Vendors' product revisions (CVSS 8.3, givanz Vvveb)
- [CVE-2026-49228](https://cve.now/CVE-2026-49228.md): Vvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' products (CVSS 8.8, givanz Vvveb)
- [CVE-2026-71573](https://cve.now/CVE-2026-71573.md): Joomla! Core - \[20260802\] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 6.9, Joomla! Project Joomla! CMS)
- [CVE-2026-72531](https://cve.now/CVE-2026-72531.md): Joomla! Core - \[20260804\] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS)
- [CVE-2026-73336](https://cve.now/CVE-2026-73336.md): Joomla! Core - \[20260806\] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS · joomla)
- [CVE-2026-73372](https://cve.now/CVE-2026-73372.md): Joomla! Core - \[20260809\] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS)
- [CVE-2026-71572](https://cve.now/CVE-2026-71572.md): Joomla! Core - \[20260801\] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 4.8, Joomla! Project Joomla! CMS)
- [CVE-2026-73337](https://cve.now/CVE-2026-73337.md): Joomla! Core - \[20260807\] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 (CVSS 8.2, Joomla! Project Joomla! CMS)
- [CVE-2026-73371](https://cve.now/CVE-2026-73371.md): Joomla! Core - \[20260808\] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS)
- [CVE-2026-72532](https://cve.now/CVE-2026-72532.md): Joomla! Core - \[20260805\] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 5.1, Joomla! Project Joomla! CMS)
- [CVE-2026-73373](https://cve.now/CVE-2026-73373.md): Joomla! Core - \[20260810\] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 8.9, Joomla! Project Joomla! CMS · Joomla! Project Joomla! Frame…)
- [CVE-2026-71574](https://cve.now/CVE-2026-71574.md): Joomla! Core - \[20260803\] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 (CVSS 8.5, Joomla! Project Joomla! CMS)
- [CVE-2026-49226](https://cve.now/CVE-2026-49226.md): Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' posts (CVSS 8.3, givanz Vvveb)
- [CVE-2026-49227](https://cve.now/CVE-2026-49227.md): Vvveb comment authorization bypass allows Authors to read, approve, edit, or delete comments under other Authors' posts (CVSS 7.6, givanz Vvveb)
- [CVE-2026-49221](https://cve.now/CVE-2026-49221.md): Vvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assets (CVSS 8.8, givanz Vvveb)
- [CVE-2026-45118](https://cve.now/CVE-2026-45118.md): MyBB: Contact page reflected XSS (CVSS 9.3, mybb)
- [CVE-2026-45117](https://cve.now/CVE-2026-45117.md): MyBB: Installer database configuration RCE (CVSS 9.8, mybb)
- [CVE-2026-45129](https://cve.now/CVE-2026-45129.md): MyBB: ACP Recovery Codes CSRF (CVSS 4.6, mybb)
- [CVE-2026-45124](https://cve.now/CVE-2026-45124.md): MyBB: Mod CP report resolution missing authorization (CVSS 4.3, mybb)
- [CVE-2026-45120](https://cve.now/CVE-2026-45120.md): MyBB: Insufficient authorization for private calendar events (CVSS 5.4, mybb)
- [CVE-2026-47245](https://cve.now/CVE-2026-47245.md): MyBB: Buddy list corruption (CVSS 4.3, mybb)
- [CVE-2026-71365](https://cve.now/CVE-2026-71365.md): Awx: webhook status callback ssrf leaks the git pat (CVSS 7.7, Red Hat Ansible Automation Platform 2.5 for RHEL · Red H… +1)
- [CVE-2026-45734](https://cve.now/CVE-2026-45734.md): MyBB: Default CAPTCHA missing invalidation (CVSS 5.3, mybb)
- [CVE-2026-15806](https://cve.now/CVE-2026-15806.md): \`HTTPPasswordMgr\` can send saved HTTPS credentials via HTTP because of incorrect scheme matching (CVSS 6.0, Python Software Foundation CPython · libpython +2)
- [CVE-2026-12564](https://cve.now/CVE-2026-12564.md): Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf (CVSS 9.6, Red Hat Ansible Automation Platform 2.4 for RHEL · Red H… +2)
- [CVE-2026-45125](https://cve.now/CVE-2026-45125.md): MyBB: Email User CRLF injection (CVSS 5.3, mybb)
- [CVE-2026-45122](https://cve.now/CVE-2026-45122.md): MyBB: Insufficient permission check for calendar event move (CVSS 4.3, mybb)
- [CVE-2026-45119](https://cve.now/CVE-2026-45119.md): MyBB: ACP UTF-8 Conversion CSRF (CVSS 4.6, mybb)
- [CVE-2026-75926](https://cve.now/CVE-2026-75926.md): Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant (CVSS 9.3, gohugoio hugo)
- [CVE-2026-45126](https://cve.now/CVE-2026-45126.md): MyBB: ACP Questions state CSRF (CVSS 3.5, mybb)
- [CVE-2026-45116](https://cve.now/CVE-2026-45116.md): MyBB: Profile field type confusion XSS (CVSS 8.7, mybb)
- [CVE-2026-45115](https://cve.now/CVE-2026-45115.md): MyBB: Buddy/ignore list username XSS (CVSS 8.7, mybb)
- [CVE-2026-45121](https://cve.now/CVE-2026-45121.md): MyBB: Insufficient permission check for calendar select (CVSS 4.3, mybb)
- [CVE-2026-46482](https://cve.now/CVE-2026-46482.md): MyBB: Security Question insufficient validation (CVSS 5.3, mybb)
- [CVE-2026-45123](https://cve.now/CVE-2026-45123.md): MyBB: IPv6 SSRF (CVSS 4.3, mybb)
- [CVE-2026-45128](https://cve.now/CVE-2026-45128.md): MyBB: ACP Users View Manager default CSRF (CVSS 3.5, mybb)
- [CVE-2026-45127](https://cve.now/CVE-2026-45127.md): MyBB: ACP Mass Mail draft resend CSRF (CVSS 3.5, mybb)
- [CVE-2026-55839](https://cve.now/CVE-2026-55839.md): Kestra: Stored XSS via custom Markdown \[\[link\]\] attribute injection (CVSS 8.7, kestra-io kestra · io.kestra:kestra)
- [CVE-2026-73073](https://cve.now/CVE-2026-73073.md): Vim: Arbitrary Ex Command Execution in C Omni-Completion (CVSS 7.1, vim)
- [CVE-2026-71477](https://cve.now/CVE-2026-71477.md): mise: Incorrect file ownership, when installed by the root user using \`install.sh\` (CVSS 6.7, jdx mise)
- [CVE-2026-75915](https://cve.now/CVE-2026-75915.md): CodeWhale before 0.8.64 Environment Variable Leak via js\_execution (CVSS 8.7, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75914](https://cve.now/CVE-2026-75914.md): CodeWhale before 0.8.64 Path Traversal via image\_analyze symlink (CVSS 8.7, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75913](https://cve.now/CVE-2026-75913.md): CodeWhale before 0.8.64 Argument Injection via git\_show (CVSS 8.5, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75912](https://cve.now/CVE-2026-75912.md): CodeWhale before 0.8.64 Argument Injection via git\_blame (CVSS 8.3, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75911](https://cve.now/CVE-2026-75911.md): CodeWhale before 0.8.64 Remote Code Execution via allow\_shell (CVSS 8.5, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-19500](https://cve.now/CVE-2026-19500.md): SureForms contains an uncontrolled resource consumption vulnerability (CVSS 7.5, SureForms)
- [CVE-2026-75904](https://cve.now/CVE-2026-75904.md): libmodplug \<= 0.8.9.1 - Out-of-Bounds Read in pat\_smplooped via Crafted MIDI File (CVSS 4.8, Konstanty Bialkowski libmodplug)
- [CVE-2026-75859](https://cve.now/CVE-2026-75859.md): CodeWhale before 0.8.64 Arbitrary File Read via instructions (CVSS 8.7, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75858](https://cve.now/CVE-2026-75858.md): CodeWhale rlm\_eval before 0.8.64 Remote Code Execution (CVSS 8.5, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75857](https://cve.now/CVE-2026-75857.md): CodeWhale before 0.8.64 Privilege Escalation via exec\_shell\_interact (CVSS 7.3, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75856](https://cve.now/CVE-2026-75856.md): CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU (CVSS 9.2, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-19501](https://cve.now/CVE-2026-19501.md): CVE-2026-19501 (CVSS 8.8, SureForms)
- [CVE-2026-62684](https://cve.now/CVE-2026-62684.md): File Browser: Share API exposes the password hash and bypass token (CVSS 2.7, filebrowser · github.com/filebrowser/filebrowser/v2 +1)
- [CVE-2026-62357](https://cve.now/CVE-2026-62357.md): DragonflyDB \`CMS.INITBYDIM\` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write (CVSS 8.8, dragonflydb dragonfly)
- [CVE-2026-75485](https://cve.now/CVE-2026-75485.md): Must-gather: /tmp/kubeconfig retention (CVSS 5.5, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-73834](https://cve.now/CVE-2026-73834.md): Must-gather: must-gather: embedded secret data in acm wrapper crs collected without redaction (CVSS 5.5, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-63328](https://cve.now/CVE-2026-63328.md): Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write (CVSS 6.8, aquasecurity trivy · github.com/aquasecurity/trivy)
- [CVE-2026-45733](https://cve.now/CVE-2026-45733.md): Trilium: Stored XSS in note icon rendering leads to Remote Code Execution in Electron desktop app (CVSS 8.3, TriliumNext Trilium)
- [CVE-2026-68939](https://cve.now/CVE-2026-68939.md): Pyenv: Glob/wildcard metacharacters bypass is\_version\_safe(), causing silent version/interpreter substitution via unquoted expansion (CVE-2022-35861 residual) (CVSS 2.0, pyenv)
- [CVE-2026-50187](https://cve.now/CVE-2026-50187.md): Oh My Zsh: Arbitrary Code Execution in oh-my-zsh dotenv plugin via malicious .env files (CVSS 8.8, ohmyzsh)
- [CVE-2026-59825](https://cve.now/CVE-2026-59825.md): Mastodon: Unwanted deactivation of SSL/TLS certificate verification (CVSS 7.4, mastodon)
- [CVE-2026-69189](https://cve.now/CVE-2026-69189.md): Hoppscotch: Cross-user private data exposure and UserHistory IDOR via team GraphQL resolvers (CVSS 7.6, hoppscotch)
- [CVE-2026-66793](https://cve.now/CVE-2026-66793.md): Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke (CVSS 8.8, Red Hat Advanced Cluster Management for Kubernetes)
- [CVE-2026-50139](https://cve.now/CVE-2026-50139.md): goshs: Share-link ?token=… redemption races past download limit (CVSS 5.9, patrickhener goshs · goshs.de/goshs/v2 +1)
- [CVE-2026-70657](https://cve.now/CVE-2026-70657.md): Copyparty: file/dirkey confusion (CVSS 4.3, 9001 copyparty · copyparty)
- [CVE-2026-50138](https://cve.now/CVE-2026-50138.md): goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags (CVSS 8.1, patrickhener goshs · goshs.de/goshs +1)
- [CVE-2026-59949](https://cve.now/CVE-2026-59949.md): yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI) (CVSS 6.5, yawkat lz4-java · at.yawk.lz4:lz4-java +1)
- [CVE-2026-18534](https://cve.now/CVE-2026-18534.md): Address bar spoofing risk in affected iOS versions of Arc Search (CVSS 7.4, The Browser Company of New York ArcSearch)
- [CVE-2026-48798](https://cve.now/CVE-2026-48798.md): SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames (CVSS 7.1, sshnet SSH.NET · SSH.NET)
- [CVE-2026-63632](https://cve.now/CVE-2026-63632.md): ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape (CVSS 3.3, onnx)
- [CVE-2026-71539](https://cve.now/CVE-2026-71539.md): n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution (CVSS 8.9, n8n-io n8n · n8n)
- [CVE-2026-59940](https://cve.now/CVE-2026-59940.md): Seroval: \`seroval.fromJSON()\` Promise resolver type confusion invokes attacker-controlled methods during deserialization (CVSS 9.8, lxsmnsyc seroval · seroval)
- [CVE-2026-75032](https://cve.now/CVE-2026-75032.md): Bluez: bluez: out-of-bounds read in avrcp parse\_media\_element and parse\_media\_folder (CVSS 6.3, Red Hat Enterprise Linux)
- [CVE-2026-61407](https://cve.now/CVE-2026-61407.md): Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. (CVSS 8.8, Dell Watchdog Timer Driver)
- [CVE-2026-73426](https://cve.now/CVE-2026-73426.md): Trix: Stored XSS vulnerability through serialized attributes (CVSS 4.6, basecamp trix · action\_text-trix +1)
- [CVE-2026-75898](https://cve.now/CVE-2026-75898.md): RAGFlow \< 0.26.3 - Server-Side Request Forgery via Agent Invoke Component (CVSS 8.4, infiniflow ragflow)
- [CVE-2026-63639](https://cve.now/CVE-2026-63639.md): Valkey: UAF in stream deserialization may lead to remote code execution (CVSS 8.8, valkey-io valkey)
- [CVE-2026-56684](https://cve.now/CVE-2026-56684.md): Valkey: TLS pending-data processing use-after-free may allow remote code execution (CVSS 7.5, valkey-io valkey)
- [CVE-2026-66046](https://cve.now/CVE-2026-66046.md): Expat Denial of Service via storeAtts() Quadratic Complexity (CVSS 8.7, libexpat project libexpat)
- [CVE-2026-75872](https://cve.now/CVE-2026-75872.md): HTML Injection in MailerUp double opt-in verification email (CVSS 6.9, maalfer MailerUp)
- [CVE-2026-74015](https://cve.now/CVE-2026-74015.md): WordPress Readabler plugin \< 2.0.18 - SQL Injection vulnerability (CVSS 9.3, merkulove Readabler)
- [CVE-2026-74012](https://cve.now/CVE-2026-74012.md): WordPress TaxoPress plugin \<= 3.51.0 - PHP Object Injection vulnerability (CVSS 8.8, TaxoPress)
- [CVE-2026-74009](https://cve.now/CVE-2026-74009.md): WordPress Razorpay for WooCommerce plugin \<= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, Razorpay for WooCommerce)
- [CVE-2026-74008](https://cve.now/CVE-2026-74008.md): WordPress Shortcodes and extra features for Phlox theme plugin \<= 2.17.24 - Sensitive Data Exposure vulnerability (CVSS 5.3, Averta Shortcodes and extra features for Phlox theme)
- [CVE-2026-74007](https://cve.now/CVE-2026-74007.md): WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery plugin \<= 1.16.20 - Sensitive Data Exposure vulnerability (CVSS 5.3, iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Ima…)
- [CVE-2026-74006](https://cve.now/CVE-2026-74006.md): WordPress WP Table Builder plugin \<= 2.2.0 - Broken Access Control vulnerability (CVSS 4.3, WP Table Builder)
- [CVE-2026-74004](https://cve.now/CVE-2026-74004.md): WordPress Gravity Booster &#8211; Styles &amp; Layouts for Gravity Forms plugin \<= 6.0 - Broken Access Control vulnerability (CVSS 5.4, wpmonks Gravity Booster &#8211; Styles &amp; Layouts for Gr…)
- [CVE-2026-74003](https://cve.now/CVE-2026-74003.md): WordPress RomethemeForm For Elementor plugin \<= 1.2.6 - Broken Access Control vulnerability (CVSS 4.3, RomethemeForm For Elementor)
- [CVE-2026-73997](https://cve.now/CVE-2026-73997.md): WordPress Starter Templates by Kadence WP plugin \<= 2.3.3 - Denial of Service Attack vulnerability (CVSS 7.5, Nexcess Starter Templates by Kadence WP)
- [CVE-2026-73996](https://cve.now/CVE-2026-73996.md): WordPress Masteriyo - LMS plugin \<= 2.3.2 - Arbitrary File Upload vulnerability (CVSS 9.8, Masteriyo - LMS)
- [CVE-2026-73995](https://cve.now/CVE-2026-73995.md): WordPress User Registration plugin \<= 5.2.6 - Broken Authentication vulnerability (CVSS 5.4, wpeverest User Registration)
- [CVE-2026-73994](https://cve.now/CVE-2026-73994.md): WordPress Charitable plugin \<= 1.8.11.3 - Broken Access Control vulnerability (CVSS 7.5, Syed Balkhi Charitable)
- [CVE-2026-73404](https://cve.now/CVE-2026-73404.md): WordPress MasterStudy LMS plugin \<= 3.7.41 - Broken Access Control vulnerability (CVSS 6.5, Stylemix MasterStudy LMS)
- [CVE-2026-73400](https://cve.now/CVE-2026-73400.md): WordPress Restaurant Menu by MotoPress plugin \<= 2.4.11 - Local File Inclusion vulnerability (CVSS 8.1, jetmonsters Restaurant Menu by MotoPress)
- [CVE-2026-73399](https://cve.now/CVE-2026-73399.md): WordPress Flutterwave WooCommerce plugin \<= 3.3.0 - Broken Authentication vulnerability (CVSS 6.5, Flutterwave WooCommerce)
- [CVE-2026-73398](https://cve.now/CVE-2026-73398.md): WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 - Broken Authentication vulnerability (CVSS 6.5, Papaki (Enartia S.A.) Piraeus Bank WooCommerce Payment Gate…)
- [CVE-2026-73397](https://cve.now/CVE-2026-73397.md): WordPress Youzify plugin \<= 1.3.7 - Deserialization of untrusted data vulnerability (CVSS 9.8, Youzify)
- [CVE-2026-73396](https://cve.now/CVE-2026-73396.md): WordPress MWB HubSpot for WooCommerce plugin \<= 1.6.7 - Broken Authentication vulnerability (CVSS 7.1, MakeWebBetter MWB HubSpot for WooCommerce)
- [CVE-2026-73395](https://cve.now/CVE-2026-73395.md): WordPress Booking calendar, Appointment Booking System plugin \<= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, wpdevart Booking calendar, Appointment Booking System)
- [CVE-2026-73393](https://cve.now/CVE-2026-73393.md): WordPress Subscribe2 plugin \<= 10.46 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, weDevs Subscribe2)
- [CVE-2026-73383](https://cve.now/CVE-2026-73383.md): WordPress CTX Feed plugin \<= 6.6.47 - Arbitrary File Download vulnerability (CVSS 4.9, WebAppick CTX Feed)
- [CVE-2026-73382](https://cve.now/CVE-2026-73382.md): WordPress Site Reviews plugin \<= 8.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Gemini Labs Site Reviews)
- [CVE-2026-73381](https://cve.now/CVE-2026-73381.md): WordPress Popup by Supsystic plugin \<= 1.13.0 - Broken Authentication vulnerability (CVSS 9.1, Popup by Supsystic)
- [CVE-2026-73380](https://cve.now/CVE-2026-73380.md): WordPress Popup by Supsystic plugin \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8, Popup by Supsystic)
- [CVE-2026-73379](https://cve.now/CVE-2026-73379.md): WordPress Contact Form by Supsystic plugin \< 1.10.0 - Bypass Vulnerability vulnerability (CVSS 6.5, Contact Form by Supsystic)
- [CVE-2026-73378](https://cve.now/CVE-2026-73378.md): WordPress Contact Form by Supsystic plugin \< 1.10.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Contact Form by Supsystic)
- [CVE-2026-73377](https://cve.now/CVE-2026-73377.md): WordPress Ultimate Maps by Supsystic plugin \< 1.5.0 - Broken Access Control vulnerability (CVSS 7.5, Ultimate Maps by Supsystic)
- [CVE-2026-73376](https://cve.now/CVE-2026-73376.md): WordPress Ultimate Maps by Supsystic plugin \< 1.5.0 - PHP Object Injection vulnerability (CVSS 9.8, Ultimate Maps by Supsystic)
- [CVE-2026-73375](https://cve.now/CVE-2026-73375.md): WordPress Ultimate Maps by Supsystic plugin \< 1.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Ultimate Maps by Supsystic)
- [CVE-2026-73367](https://cve.now/CVE-2026-73367.md): WordPress Easy Google Maps plugin \< 1.14.2 - Remote File Inclusion vulnerability (CVSS 7.2, supsystic Easy Google Maps)
- [CVE-2026-73366](https://cve.now/CVE-2026-73366.md): WordPress Easy Google Maps plugin \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8, supsystic Easy Google Maps)
- [CVE-2026-73365](https://cve.now/CVE-2026-73365.md): WordPress JetAppointment plugin \<= 2.5.2 - SQL Injection vulnerability (CVSS 9.3, Crocoblock. Jetimpex JetAppointment)
- [CVE-2026-73362](https://cve.now/CVE-2026-73362.md): WordPress URL Shortify plugin \<= 2.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, KaizenCoders URL Shortify)
- [CVE-2026-73361](https://cve.now/CVE-2026-73361.md): WordPress Recipe Card Blocks for Gutenberg & Elementor plugin \<= 3.4.18 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPZOOM Recipe Card Blocks for Gutenberg & Elementor)
- [CVE-2026-73360](https://cve.now/CVE-2026-73360.md): WordPress Chaty Pro plugin \<= 3.5.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Premio Chaty Pro)
- [CVE-2026-73359](https://cve.now/CVE-2026-73359.md): WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin \<= 4.3.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy C…)
- [CVE-2026-73358](https://cve.now/CVE-2026-73358.md): WordPress Affiliates Manager plugin \<= 2.9.53 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wp.insider Affiliates Manager)
- [CVE-2026-73356](https://cve.now/CVE-2026-73356.md): WordPress Breeze plugin \<= 2.5.12 - Arbitrary Content Deletion vulnerability (CVSS 8.2, Cloudways Breeze)
- [CVE-2026-73355](https://cve.now/CVE-2026-73355.md): WordPress Affiliates Manager plugin \<= 2.9.53 - SQL Injection vulnerability (CVSS 9.3, wp.insider Affiliates Manager)
- [CVE-2026-73352](https://cve.now/CVE-2026-73352.md): WordPress GiveWP plugin \<= 4.16.5.1 - Broken Access Control vulnerability (CVSS 6.5, Nexcess GiveWP)
- [CVE-2026-73351](https://cve.now/CVE-2026-73351.md): WordPress WordPress Social Login and Register plugin \<= 7.8.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, miniOrange WordPress Social Login and Register)
- [CVE-2026-73350](https://cve.now/CVE-2026-73350.md): WordPress SupportCandy plugin \<= 3.5.1 - Broken Authentication vulnerability (CVSS 8.2, PSM Plugins SupportCandy)
- [CVE-2026-73348](https://cve.now/CVE-2026-73348.md): WordPress GiveWP plugin \< 4.16.6 - Broken Access Control vulnerability (CVSS 6.5, Nexcess GiveWP)
- [CVE-2026-73345](https://cve.now/CVE-2026-73345.md): WordPress License Manager for WooCommerce plugin \<= 3.0.18 - SQL Injection vulnerability (CVSS 7.1, Saad Iqbal License Manager for WooCommerce)
- [CVE-2026-73343](https://cve.now/CVE-2026-73343.md): WordPress WP Compress plugin \< 7.20.01 - Remote Code Execution (RCE) vulnerability (CVSS 10.0, AresIT WP Compress)
- [CVE-2026-75784](https://cve.now/CVE-2026-75784.md): TRENDnet TEW-WLC100 HTTP Header nginx FUN\_0040da4c stack-based overflow (CVSS 10.0, TRENDnet TEW-WLC100)
- [CVE-2026-73342](https://cve.now/CVE-2026-73342.md): WordPress WP Multilang plugin \<= 2.4.31 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Magazine3 WP Multilang)
- [CVE-2026-73341](https://cve.now/CVE-2026-73341.md): WordPress RegistrationMagic plugin \<= 6.0.9.7 - PHP Object Injection vulnerability (CVSS 9.8, Metagauss RegistrationMagic)
- [CVE-2026-73339](https://cve.now/CVE-2026-73339.md): WordPress Modern Events Calendar plugin \< 7.35.0 - SQL Injection vulnerability (CVSS 9.3, Webnus Modern Events Calendar)
- [CVE-2026-73338](https://cve.now/CVE-2026-73338.md): WordPress Autopay plugin \<= 5.0.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Autopay)
- [CVE-2026-73190](https://cve.now/CVE-2026-73190.md): WordPress WPDM – Premium Packages plugin \<= 7.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, W3 Eden WPDM – Premium Packages)
- [CVE-2026-73187](https://cve.now/CVE-2026-73187.md): WordPress Sticky Chat Widget plugin \<= 1.4.2 - SQL Injection vulnerability (CVSS 9.3, gingerplugins Sticky Chat Widget)
- [CVE-2026-73181](https://cve.now/CVE-2026-73181.md): WordPress Extra Product Options & Add-Ons for WooCommerce plugin \< 7.6 - Arbitrary File Download vulnerability (CVSS 7.5, ThemeComplete Extra Product Options & Add-Ons for WooCommer…)
- [CVE-2026-68568](https://cve.now/CVE-2026-68568.md): WordPress MasterStudy LMS plugin \<= 3.7.41 - Privilege Escalation vulnerability (CVSS 6.3, Stylemix MasterStudy LMS)
- [CVE-2026-68567](https://cve.now/CVE-2026-68567.md): WordPress EasyTest – Simplify A/B Testing plugin \<= 1.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Grids EasyTest – Simplify A/B Testing)
- [CVE-2026-68565](https://cve.now/CVE-2026-68565.md): WordPress GeoDirectory plugin \<= 2.8.172 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Paolo GeoDirectory)
- [CVE-2026-66679](https://cve.now/CVE-2026-66679.md): WordPress Appointment Hour Booking plugin \<= 1.5.91 - Broken Access Control vulnerability (CVSS 6.5, codepeople Appointment Hour Booking)
- [CVE-2026-66667](https://cve.now/CVE-2026-66667.md): WordPress Templately plugin \<= 3.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPDeveloper Templately)
- [CVE-2026-66651](https://cve.now/CVE-2026-66651.md): WordPress MultiVendorX plugin \<= 5.0.20 - Broken Access Control vulnerability (CVSS 6.5, MultiVendorX)
- [CVE-2026-66646](https://cve.now/CVE-2026-66646.md): WordPress WP Tab Widget plugin \<= 1.2.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, MyThemeShop WP Tab Widget)
- [CVE-2026-66645](https://cve.now/CVE-2026-66645.md): WordPress Table Of Contents Block plugin \<= 1.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPDeveloper Table Of Contents Block)
- [CVE-2026-66644](https://cve.now/CVE-2026-66644.md): WordPress Typing Effect plugin \<= 1.3.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, 93digital Typing Effect)
- [CVE-2026-66643](https://cve.now/CVE-2026-66643.md): WordPress Wufoo Shortcode plugin \<= 1.55 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, wronganswersonly Wufoo Shortcode)
- [CVE-2026-66641](https://cve.now/CVE-2026-66641.md): WordPress Video Conferencing with Zoom plugin \<= 4.6.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Deepen Bajracharya Video Conferencing with Zoom)
- [CVE-2026-66640](https://cve.now/CVE-2026-66640.md): WordPress Login With Ajax plugin \<= 4.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Marcus (aka @msykes) Login With Ajax)
- [CVE-2026-66639](https://cve.now/CVE-2026-66639.md): WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin \<= 2.0.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPZOOM Forms – Contact Form Plugin for Gutenberg)
- [CVE-2026-66638](https://cve.now/CVE-2026-66638.md): WordPress Frontend Admin by DynamiApps plugin \<= 3.29.10 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Shabti Kaplan Frontend Admin by DynamiApps)
- [CVE-2026-66637](https://cve.now/CVE-2026-66637.md): WordPress Featured Video Plus plugin \<= 2.3.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Alex Featured Video Plus)
- [CVE-2026-66636](https://cve.now/CVE-2026-66636.md): WordPress Wise Chat plugin \<= 3.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Marcin Wise Chat)
- [CVE-2026-66635](https://cve.now/CVE-2026-66635.md): WordPress Slider by 10Web plugin \<= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.4, Slider by 10Web)
- [CVE-2026-66634](https://cve.now/CVE-2026-66634.md): WordPress Modal Survey plugin \<= 2.0.2.2.3 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3, Pantherius Modal Survey)
- [CVE-2026-66633](https://cve.now/CVE-2026-66633.md): WordPress Fluent Forms Pro Add On Pack plugin \< 6.2.12 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WPManageNinja Fluent Forms Pro Add On Pack)
- [CVE-2026-66629](https://cve.now/CVE-2026-66629.md): WordPress Kirki plugin \<= 6.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Themeum Kirki)
- [CVE-2026-66627](https://cve.now/CVE-2026-66627.md): WordPress GP Premium plugin \<= 2.5.5 - Arbitrary File Upload vulnerability (CVSS 9.9, EDGE22 Studios GP Premium)
- [CVE-2026-66622](https://cve.now/CVE-2026-66622.md): WordPress Depicter Slider plugin \<= 4.8.0 - SQL Injection vulnerability (CVSS 7.5, averta Depicter Slider)
- [CVE-2026-66621](https://cve.now/CVE-2026-66621.md): WordPress Ultimate Dashboard Pro plugin \<= 3.11.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Ultimate Dashboard Pro)
- [CVE-2026-66620](https://cve.now/CVE-2026-66620.md): WordPress OptionTree plugin \<= 2.7.3 - PHP Object Injection vulnerability (CVSS 7.2, Derek Herman OptionTree)
- [CVE-2026-32553](https://cve.now/CVE-2026-32553.md): WordPress OttoKit plugin \<= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, Brainstorm Force OttoKit)
- [CVE-2026-32549](https://cve.now/CVE-2026-32549.md): WordPress ThumbPress plugin \< 6.5 - Broken Access Control vulnerability (CVSS 7.5, Codexpert ThumbPress)
- [CVE-2026-32547](https://cve.now/CVE-2026-32547.md): WordPress BP Better Messages plugin \<= 2.15.22 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, wordplus BP Better Messages)
- [CVE-2026-32481](https://cve.now/CVE-2026-32481.md): WordPress Ezoic plugin \<= 2.22.11 - Broken Authentication vulnerability (CVSS 7.5, Ezoic)
- [CVE-2026-32474](https://cve.now/CVE-2026-32474.md): WordPress Templatiq plugin \<= 0.2.5 - Arbitrary File Upload vulnerability (CVSS 9.9, wpWax Templatiq)
- [CVE-2026-32473](https://cve.now/CVE-2026-32473.md): WordPress PDF Smart Viewer for Elementor plugin \<= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2, DeKnows PDF Smart Viewer for Elementor)
- [CVE-2026-32472](https://cve.now/CVE-2026-32472.md): WordPress Online Contact Widget plugin \<= 1.3.0 - Broken Access Control vulnerability (CVSS 7.5, wbolt.com Online Contact Widget)
- [CVE-2026-32470](https://cve.now/CVE-2026-32470.md): WordPress FundEngine plugin \<= 1.7.9 - PHP Object Injection vulnerability (CVSS 9.8, Roxnor FundEngine)
- [CVE-2026-32468](https://cve.now/CVE-2026-32468.md): WordPress Duitku Payment Gateway plugin \<= 2.11.14 - Sensitive Data Exposure vulnerability (CVSS 7.5, rayhanduitku Duitku Payment Gateway)
- [CVE-2026-32467](https://cve.now/CVE-2026-32467.md): WordPress \[Aotuman\] Grab WeChat Articles plugin \<= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.0, apoyl \[Aotuman\] Grab WeChat Articles)
- [CVE-2026-32466](https://cve.now/CVE-2026-32466.md): WordPress Gravity Forms Bookings premium plugin \<= 2.1 - SQL Injection vulnerability (CVSS 8.5, WPExperts Gravity Forms Bookings premium)
- [CVE-2026-32465](https://cve.now/CVE-2026-32465.md): WordPress Essential Real Estate plugin \<= 5.3.3 - PHP Object Injection vulnerability (CVSS 8.8, g5theme Essential Real Estate)
- [CVE-2026-32464](https://cve.now/CVE-2026-32464.md): WordPress Theme Test Drive plugin \<= 2.9.1 - Local File Inclusion vulnerability (CVSS 8.1, Vladimir Prelovac Theme Test Drive)
- [CVE-2026-32463](https://cve.now/CVE-2026-32463.md): WordPress Sync Post With Other Site plugin \<= 1.9.3 - Arbitrary File Upload vulnerability (CVSS 9.9, Kamlesh Parmar Sync Post With Other Site)
- [CVE-2026-32444](https://cve.now/CVE-2026-32444.md): WordPress Cwicly plugin \<= 1.4.4 - Remote Code Execution (RCE) vulnerability (CVSS 9.9, Cwicly)
- [CVE-2026-32333](https://cve.now/CVE-2026-32333.md): WordPress Mayosis Core plugin \<= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, TeconceTheme Mayosis Core)
- [CVE-2026-28571](https://cve.now/CVE-2026-28571.md): WordPress FormyChat plugin \<= 2.15.7 - Broken Access Control vulnerability (CVSS 7.5, WPPOOL FormyChat)
- [CVE-2026-28570](https://cve.now/CVE-2026-28570.md): WordPress Vavo Core plugin \<= 2.3.0 - Local File Inclusion vulnerability (CVSS 8.1, SpabRice Vavo Core)
- [CVE-2026-28569](https://cve.now/CVE-2026-28569.md): WordPress SSL Zen plugin \<= 4.7.43 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, SSL Zen)
- [CVE-2026-28568](https://cve.now/CVE-2026-28568.md): WordPress Quill Forms plugin \<= 5.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Mohamed Magdy Quill Forms)
- [CVE-2026-28567](https://cve.now/CVE-2026-28567.md): WordPress WP Sort Order plugin \<= 1.3.5 - Broken Access Control vulnerability (CVSS 7.5, Fahad Mahmood WP Sort Order)
- [CVE-2026-28192](https://cve.now/CVE-2026-28192.md): WordPress Piotnet Addons For Elementor Pro plugin \<= 7.1.67 - Arbitrary File Upload vulnerability (CVSS 9.6, Piotnet Addons For Elementor Pro)
- [CVE-2026-28191](https://cve.now/CVE-2026-28191.md): WordPress The Grid plugin \<= 2.8.0 - Privilege Escalation vulnerability (CVSS 8.8, ThemeOne The Grid)
- [CVE-2026-17084](https://cve.now/CVE-2026-17084.md): stringprep.map\_table\_b2() deviates from RFC 3454 Table B.2 (CVSS 6.0, Python Software Foundation CPython · libpython +2)
- [CVE-2026-50575](https://cve.now/CVE-2026-50575.md): BetterDesk has a replay behavior vulnerability when devices are deleted (CVSS 7.7, UNITRONIX BetterDesk)
- [CVE-2026-24301](https://cve.now/CVE-2026-24301.md): Microsoft Copilot Information Disclosure Vulnerability (CVSS 8.8, Microsoft Copilot Web)
- [CVE-2026-16309](https://cve.now/CVE-2026-16309.md): IDOR in Netiket Information Technologies' EdoWEB (CVSS 5.3, Netiket Information Technologies EdoWEB)
- [CVE-2026-45532](https://cve.now/CVE-2026-45532.md): DataEase has a Path Traversal Vulnerability (CVSS 8.7, dataease)
- [CVE-2026-75783](https://cve.now/CVE-2026-75783.md): TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow (CVSS 9.4, TRENDnet TEW-WLC100P)
- [CVE-2026-18751](https://cve.now/CVE-2026-18751.md): Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 (CVSS 5.2, Citrix WorkSpace App)
- [CVE-2026-74989](https://cve.now/CVE-2026-74989.md): Internally found bugs fixed in Firefox 154 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74988](https://cve.now/CVE-2026-74988.md): Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74986](https://cve.now/CVE-2026-74986.md): Site isolation issue in the CSS Parsing and Computation component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74985](https://cve.now/CVE-2026-74985.md): Privilege escalation in the Enterprise Policies component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74984](https://cve.now/CVE-2026-74984.md): Race condition in the JavaScript Engine component (CVSS 6.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74982](https://cve.now/CVE-2026-74982.md): Denial-of-service in the Widget component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74981](https://cve.now/CVE-2026-74981.md): Site isolation issue in the Audio/Video: Web Codecs component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74980](https://cve.now/CVE-2026-74980.md): Clickjacking issue in the Downloads component in Firefox for Android (CVSS 6.5, Mozilla Firefox)
- [CVE-2026-74979](https://cve.now/CVE-2026-74979.md): Mitigation bypass in the Add-ons Manager component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74978](https://cve.now/CVE-2026-74978.md): Clickjacking issue in the Widget component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74977](https://cve.now/CVE-2026-74977.md): Integer overflow in the Graphics component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74975](https://cve.now/CVE-2026-74975.md): Spoofing issue in the Downloads component in Firefox for Android (CVSS 5.4, Mozilla Firefox)
- [CVE-2026-74970](https://cve.now/CVE-2026-74970.md): Site isolation issue in the Graphics component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74968](https://cve.now/CVE-2026-74968.md): Site isolation issue in the Graphics: WebRender component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74966](https://cve.now/CVE-2026-74966.md): Information disclosure in the Form Autofill component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74961](https://cve.now/CVE-2026-74961.md): Side-channel in the Web Audio component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74958](https://cve.now/CVE-2026-74958.md): Information disclosure in the WebRTC component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74956](https://cve.now/CVE-2026-74956.md): Same-origin policy bypass in the DOM: Service Workers component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74955](https://cve.now/CVE-2026-74955.md): Privilege escalation in the Request Handling component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74954](https://cve.now/CVE-2026-74954.md): Information disclosure due to side-channel in the Storage: Cache API component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74952](https://cve.now/CVE-2026-74952.md): Privilege escalation in the Application Update component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74951](https://cve.now/CVE-2026-74951.md): Clickjacking issue in Firefox for Android (CVSS 6.5, Mozilla Firefox)
- [CVE-2026-74950](https://cve.now/CVE-2026-74950.md): Privilege escalation in the Downloads API component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74947](https://cve.now/CVE-2026-74947.md): Privilege escalation due to invalid pointer in the Graphics component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74938](https://cve.now/CVE-2026-74938.md): Mitigation bypass in the JavaScript: GC component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74937](https://cve.now/CVE-2026-74937.md): Use-after-free in the JavaScript: GC component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-75874](https://cve.now/CVE-2026-75874.md): Sandbox escape in the Remote Settings Client component (CVSS 10.0, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74990](https://cve.now/CVE-2026-74990.md): Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74987](https://cve.now/CVE-2026-74987.md): Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74983](https://cve.now/CVE-2026-74983.md): Mitigation bypass in the Data Loss Prevention component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74976](https://cve.now/CVE-2026-74976.md): JIT miscompilation in the JavaScript Engine: JIT component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74974](https://cve.now/CVE-2026-74974.md): Same-origin policy bypass in the Graphics: ImageLib component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74973](https://cve.now/CVE-2026-74973.md): Race condition, use-after-free in the Graphics component (CVSS 4.2, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74972](https://cve.now/CVE-2026-74972.md): Information disclosure in the DOM: Push Subscriptions component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74971](https://cve.now/CVE-2026-74971.md): Information disclosure in the DOM: UI Events & Focus Handling component (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74969](https://cve.now/CVE-2026-74969.md): Race condition, use-after-free in the Layout: Text and Fonts component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74967](https://cve.now/CVE-2026-74967.md): Same-origin policy bypass in the Audio/Video: Playback component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74965](https://cve.now/CVE-2026-74965.md): Privilege escalation in the Shell Integration component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74964](https://cve.now/CVE-2026-74964.md): Integer overflow in the Graphics component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74963](https://cve.now/CVE-2026-74963.md): Same-origin policy bypass in the Networking: Cookies component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74962](https://cve.now/CVE-2026-74962.md): Site isolation issue in the Networking: Cookies component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74960](https://cve.now/CVE-2026-74960.md): Site isolation issue in the WebExtensions component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74959](https://cve.now/CVE-2026-74959.md): Mitigation bypass in the Storage: Cache API component (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74957](https://cve.now/CVE-2026-74957.md): Mitigation bypass in the Safe Browsing component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74953](https://cve.now/CVE-2026-74953.md): Privilege escalation in the Networking: Cookies component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74949](https://cve.now/CVE-2026-74949.md): Use-after-free in the Graphics: Canvas2D component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74948](https://cve.now/CVE-2026-74948.md): Information disclosure in the Graphics component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74946](https://cve.now/CVE-2026-74946.md): Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74945](https://cve.now/CVE-2026-74945.md): Information disclosure in the Graphics: Text component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74944](https://cve.now/CVE-2026-74944.md): Use-after-free in the DOM: Core & HTML component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74943](https://cve.now/CVE-2026-74943.md): Use-after-free in the Graphics: ImageLib component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74942](https://cve.now/CVE-2026-74942.md): Privilege escalation in the Remote Settings Client component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74941](https://cve.now/CVE-2026-74941.md): Privilege escalation in the Graphics: CanvasWebGL component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74940](https://cve.now/CVE-2026-74940.md): Use-after-free in the Graphics: Text component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74939](https://cve.now/CVE-2026-74939.md): Privilege escalation in the DOM: Navigation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74936](https://cve.now/CVE-2026-74936.md): Use-after-free in the JavaScript: WebAssembly component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74935](https://cve.now/CVE-2026-74935.md): Privilege escalation in the DOM: Networking component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-74934](https://cve.now/CVE-2026-74934.md): Site isolation issue in the Graphics: CanvasWebGL component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-59781](https://cve.now/CVE-2026-59781.md): Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading. (CVSS 5.4, Zabbix)
- [CVE-2026-23938](https://cve.now/CVE-2026-23938.md): Server DoS via JavaScript preprocessing or script items (CVSS 2.1, Zabbix)
- [CVE-2026-23937](https://cve.now/CVE-2026-23937.md): Host PSK extraction in Zabbix API (CVSS 6.0, Zabbix)
- [CVE-2026-23935](https://cve.now/CVE-2026-23935.md): Use-after-free read in script item/preprocessing HttpRequest body (CVSS 6.8, Zabbix)
- [CVE-2026-23934](https://cve.now/CVE-2026-23934.md): Frontend DoS via the validate.api.exists action (CVSS 5.1, Zabbix)
- [CVE-2026-23933](https://cve.now/CVE-2026-23933.md): Hardcoded session key in Zabbix 7.4 (CVSS 7.7, Zabbix)
- [CVE-2026-23931](https://cve.now/CVE-2026-23931.md): Frontend plaintext macro value enumeration via the validatate.api.exists action (CVSS 5.3, Zabbix)
- [CVE-2026-23930](https://cve.now/CVE-2026-23930.md): Frontend DoS via the popup.testtriggerexpr action (CVSS 5.3, Zabbix)
- [CVE-2026-23929](https://cve.now/CVE-2026-23929.md): Prototype pollution leading to stored XSS (CVSS 8.5, Zabbix)
- [CVE-2026-1199](https://cve.now/CVE-2026-1199.md): API and Frontend login lockout race condition (CVSS 6.9, Zabbix)
- [CVE-2026-75778](https://cve.now/CVE-2026-75778.md): code-projects Task Management System Login Form index.php select\_with\_multiple\_condition sql injection (CVSS 6.9, code-projects Task Management System)
- [CVE-2026-23922](https://cve.now/CVE-2026-23922.md): Email media OAuth secret leak to Super Admin (CVSS 2.1, Zabbix)
- [CVE-2026-5224](https://cve.now/CVE-2026-5224.md): Sensitive Data Exposure in Kriptek Crypto's Cryptosim (CVSS 5.7, Kriptok Crypto and Information Technologies Industry Trade…)
- [CVE-2026-15585](https://cve.now/CVE-2026-15585.md): Path Traversal in AKIN Software's Wolvox9 ERP (CVSS 7.5, AKIN Software Computer Import Export Industry and Trade AKI…)
- [CVE-2026-75855](https://cve.now/CVE-2026-75855.md): ArcadeDB before 26.8.1 Path Traversal via create/drop database (CVSS 8.4, ArcadeData arcadedb)
- [CVE-2026-75854](https://cve.now/CVE-2026-75854.md): ArcadeDB Redis Wire-Protocol Plugin Missing Authentication (CVSS 9.3, ArcadeData arcadedb)
- [CVE-2026-75853](https://cve.now/CVE-2026-75853.md): ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Database (CVSS 8.7, ArcadeData arcadedb)
- [CVE-2026-75852](https://cve.now/CVE-2026-75852.md): ArcadeDB MongoDB wire protocol authentication bypass cross-database (CVSS 9.3, ArcadeData arcadedb)
- [CVE-2026-75851](https://cve.now/CVE-2026-75851.md): ArcadeDB before 26.8.1 Authentication Bypass via Async Command (CVSS 9.4, ArcadeData arcadedb)
- [CVE-2026-75850](https://cve.now/CVE-2026-75850.md): ArcadeDB before 26.8.1 Per-Type ACL Bypass via Batch Handlers (CVSS 2.3, ArcadeData arcadedb)
- [CVE-2026-75846](https://cve.now/CVE-2026-75846.md): ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION (CVSS 7.1, ArcadeData arcadedb)
- [CVE-2026-75845](https://cve.now/CVE-2026-75845.md): ArcadeDB 26.4.2 before 26.8.1 Authorization Bypass via set\_server\_setting (CVSS 5.3, ArcadeData arcadedb)
- [CVE-2026-75844](https://cve.now/CVE-2026-75844.md): ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypass (CVSS 7.1, ArcadeData arcadedb)
- [CVE-2026-75843](https://cve.now/CVE-2026-75843.md): ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction (CVSS 9.4, ArcadeData arcadedb)
- [CVE-2026-75842](https://cve.now/CVE-2026-75842.md): ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV (CVSS 8.3, ArcadeData arcadedb)
- [CVE-2026-75841](https://cve.now/CVE-2026-75841.md): ArcadeDB before 26.8.1 Denial of Service via range() (CVSS 5.3, ArcadeData arcadedb)
- [CVE-2026-75840](https://cve.now/CVE-2026-75840.md): ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex (CVSS 8.7, ArcadeData arcadedb)
- [CVE-2026-75839](https://cve.now/CVE-2026-75839.md): ArcadeDB before 26.8.1 Information Disclosure via Cluster Endpoints (CVSS 5.3, ArcadeData arcadedb)
- [CVE-2026-75838](https://cve.now/CVE-2026-75838.md): DOMPurify before 3.4.13 Cross-Site Scripting via IN\_PLACE hook (CVSS 5.1, cure53 DOMPurify · dompurify)
- [CVE-2026-75837](https://cve.now/CVE-2026-75837.md): Grav before 2.0.14 Privilege Escalation via Group Access Field (CVSS 9.3, getgrav grav · getgrav/grav)
- [CVE-2026-75836](https://cve.now/CVE-2026-75836.md): Grav API Plugin before 1.0.14 Missing Authorization (CVSS 8.7, getgrav grav)
- [CVE-2026-75835](https://cve.now/CVE-2026-75835.md): Grav API Plugin before 1.0.14 Missing Authorization (CVSS 9.3, getgrav grav)
- [CVE-2026-75834](https://cve.now/CVE-2026-75834.md): Grav before 2.0.14 Stored XSS via Invalid UTF-8 Byte (CVSS 5.1, getgrav grav · getgrav/grav)
- [CVE-2026-75833](https://cve.now/CVE-2026-75833.md): Grav API Plugin Open Redirect via Backslash Bypass (CVSS 8.6, getgrav grav)
- [CVE-2026-75832](https://cve.now/CVE-2026-75832.md): Grav API Plugin before 1.0.14 Authorization Bypass (CVSS 9.3, getgrav grav)
- [CVE-2026-75831](https://cve.now/CVE-2026-75831.md): Grav before 2.0.15 Stored XSS via audio/video source URL (CVSS 5.1, getgrav grav · getgrav/grav)
- [CVE-2026-75830](https://cve.now/CVE-2026-75830.md): grav-plugin-api before 1.0.15 Path Traversal via batchCopy (CVSS 7.1, getgrav grav)
- [CVE-2026-75829](https://cve.now/CVE-2026-75829.md): grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint (CVSS 8.6, getgrav grav)
- [CVE-2026-75828](https://cve.now/CVE-2026-75828.md): Grav before 2.0.15 Stored XSS via detectXss() Quote Bypass (CVSS 9.3, getgrav grav · getgrav/grav)
- [CVE-2026-75827](https://cve.now/CVE-2026-75827.md): Grav before 2.0.15 Arbitrary File Write via error\_log (CVSS 9.3, getgrav grav · getgrav/grav)
- [CVE-2026-75107](https://cve.now/CVE-2026-75107.md): Grav Form Plugin before 9.1.19 Stored XSS via Field Properties (CVSS 5.1, getgrav grav)
- [CVE-2026-74908](https://cve.now/CVE-2026-74908.md): Grav plugin-api before 1.0.15 Script Injection via SVG (CVSS 5.1, getgrav grav)
- [CVE-2026-74907](https://cve.now/CVE-2026-74907.md): Grav before 2.0.15 Path Traversal via plugin-asset-map.php (CVSS 8.2, getgrav grav · getgrav/grav)
- [CVE-2026-74906](https://cve.now/CVE-2026-74906.md): SiYuan before v3.7.4 Incorrect Authorization via Publish Access (CVSS 8.7, siyuan-note siyuan)
- [CVE-2026-74905](https://cve.now/CVE-2026-74905.md): SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass (CVSS 6.9, siyuan-note siyuan)
- [CVE-2026-74904](https://cve.now/CVE-2026-74904.md): SiYuan before v3.7.4 Missing Authorization via block API (CVSS 8.7, siyuan-note siyuan · github.com/siyuan-note/siyuan/kernel)
- [CVE-2026-74903](https://cve.now/CVE-2026-74903.md): SiYuan before v3.7.4 Insufficient Access Control via spinBlockDOM (CVSS 5.3, siyuan-note siyuan)
- [CVE-2026-74902](https://cve.now/CVE-2026-74902.md): SiYuan before v3.7.4 XSS-to-RCE via malicious filename upload (CVSS 9.3, siyuan-note siyuan)
- [CVE-2026-75774](https://cve.now/CVE-2026-75774.md): karakeep-app karakeep OAuth Sign-In auth.ts improper authentication (CVSS 6.3, karakeep-app karakeep)
- [CVE-2026-19608](https://cve.now/CVE-2026-19608.md): Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies (CVSS 5.3, Red Hat Build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-75773](https://cve.now/CVE-2026-75773.md): karakeep-app karakeep Login Endpoint auth.ts authorize excessive authentication (CVSS 6.3, karakeep-app karakeep)
- [CVE-2026-19447](https://cve.now/CVE-2026-19447.md): Stored XSS in Fileorbis Informatics's FileOrbis (CVSS 5.4, Fileorbis Informatics Services Trade FileOrbis)
- [CVE-2026-75627](https://cve.now/CVE-2026-75627.md): Bastillion Authentication Bypass via Path-Prefix Routing Mismatch (CVSS 9.3, bastillion-io Bastillion)
- [CVE-2026-75626](https://cve.now/CVE-2026-75626.md): SpiderFoot Stored Cross-Site Scripting via Correlation Titles (CVSS 9.3, smicallef spiderfoot)
- [CVE-2024-14046](https://cve.now/CVE-2024-14046.md): OpenBoxes Document Upload Controller DocumentController.groovy DocumentController unrestricted upload (CVSS 5.3, OpenBoxes)
- [CVE-2026-18929](https://cve.now/CVE-2026-18929.md): Resource Exhaustion in Carbone (CVSS 6.9, Carbone)
- [CVE-2026-43971](https://cve.now/CVE-2026-43971.md): Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow\_link:link/1 (CVSS 6.3, ninenines cowlib)
- [CVE-2024-14045](https://cve.now/CVE-2024-14045.md): OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization (CVSS 5.3, OpenBoxes)
- [CVE-2026-34884](https://cve.now/CVE-2026-34884.md): Apache SkyWalking MCP: SSRF via set\_skywalking\_url Tool and GraphQL Expression Injection in MCP Server (CVSS 9.8, Apache Software Foundation Apache SkyWalking MCP)
- [CVE-2026-15371](https://cve.now/CVE-2026-15371.md): Velociraptor Stored XSS in URL column types (CVSS 8.1, Rapid7 Velociraptor)
- [CVE-2026-75091](https://cve.now/CVE-2026-75091.md): Quill Forms \<= 5.7.1 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, mdmag Quill Forms | Conversational Multi Step Forms, Survey…)
- [CVE-2026-15748](https://cve.now/CVE-2026-15748.md): Forminator Forms \<= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration (CVSS 9.8, wpmudev Forminator Forms – Contact Form, Payment Form & Cus…)
- [CVE-2026-11801](https://cve.now/CVE-2026-11801.md): WPAdverts \<= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint (CVSS 7.5, gwin WPAdverts – Classifieds Plugin)
- [CVE-2026-75151](https://cve.now/CVE-2026-75151.md): SourceCodester Onlne Examination & Learning Management System cross-site request forgery (CVSS 5.3, SourceCodester Onlne Examination & Learning Management Syst…)
- [CVE-2026-75094](https://cve.now/CVE-2026-75094.md): COMFAST CF-N1-S CGI mbox-config sub\_44B438 os command injection (CVSS 9.4, COMFAST CF-N1-S)
- [CVE-2026-75093](https://cve.now/CVE-2026-75093.md): sonos tract ONNX Initializer Loader tensor.rs from\_raw\_dt\_align buffer size (CVSS 5.3, sonos tract)
- [CVE-2026-75090](https://cve.now/CVE-2026-75090.md): EricLBuehler Mistral.rs GGUF Tokenizer gguf\_tokenizer.rs convert\_gguf\_to\_hf\_tokenizer out-of-bounds (CVSS 5.3, EricLBuehler Mistral.rs)
- [CVE-2026-75089](https://cve.now/CVE-2026-75089.md): PHPGurukul Complaint Management System check\_availability.php sql injection (CVSS 6.9, PHPGurukul Complaint Management System)
- [CVE-2026-75088](https://cve.now/CVE-2026-75088.md): itsourcecode Hospital Management System viewbilling.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-75087](https://cve.now/CVE-2026-75087.md): itsourcecode Hospital Management System viewdepartment.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-75086](https://cve.now/CVE-2026-75086.md): itsourcecode Hospital Management System viewroom.php sql injection (CVSS 5.3, itsourcecode Hospital Management System)
- [CVE-2026-75082](https://cve.now/CVE-2026-75082.md): Webkul Bagisto Customer-Registration Notification Email register cross site scripting (CVSS 5.3, Webkul Bagisto)
- [CVE-2021-43716](https://cve.now/CVE-2021-43716.md): Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. (CVSS 9.8)
- [CVE-2021-43717](https://cve.now/CVE-2021-43717.md): An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6. (CVSS 9.8)
- [CVE-2021-43718](https://cve.now/CVE-2021-43718.md): An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Den (CVSS 5.3)
- [CVE-2026-30250](https://cve.now/CVE-2026-30250.md): Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote att (CVSS 6.1)
- [CVE-2026-52480](https://cve.now/CVE-2026-52480.md): An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service (CVSS 6.5)
- [CVE-2026-52481](https://cve.now/CVE-2026-52481.md): An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp\_actions() fun (CVSS 7.5)
- [CVE-2026-52606](https://cve.now/CVE-2026-52606.md): A reflected cross-site scripting (XSS) vulnerability in reportico-web \<= 8.1.0 allows remote attackers to execute arbitrary JavaScript in th (CVSS 6.1)
- [CVE-2026-52607](https://cve.now/CVE-2026-52607.md): A directory traversal vulnerability in reportico-web \<= 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web se (CVSS 6.5)
- [CVE-2026-52608](https://cve.now/CVE-2026-52608.md): An incorrect access control vulnerability in reportico-web \<= 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the (CVSS 9.8)
- [CVE-2026-52609](https://cve.now/CVE-2026-52609.md): A reflected cross-site scripting (XSS) vulnerability in reportico-web \<= 8.1.0 allows remote attackers to execute arbitrary JavaScript in th (CVSS 6.1)
- [CVE-2026-52610](https://cve.now/CVE-2026-52610.md): An arbitrary file write/directory traversal vulnerability in reportico-web \<= 8.1.0 allows remote attackers to create or overwrite files any (CVSS 9.1)
- [CVE-2026-57826](https://cve.now/CVE-2026-57826.md): An issue was discovered in openHiTLS 0.2.0 through 0.3.2. (CVSS 6.8)
- [CVE-2026-67846](https://cve.now/CVE-2026-67846.md): Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect privilege assignment iss (CVSS 7.8)
- [CVE-2026-67920](https://cve.now/CVE-2026-67920.md): An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreW (CVSS 8.8)
- [CVE-2026-67921](https://cve.now/CVE-2026-67921.md): Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer. (CVSS 9.3)
- [CVE-2026-71675](https://cve.now/CVE-2026-71675.md): An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap\_send\_to\_nas() function in src/amf/ngap-path.c (CVSS 7.5)
- [CVE-2026-71676](https://cve.now/CVE-2026-71676.md): Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, trigge (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-08-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.