CVEs published September 15, 2026
1,426 CVEs were published on September 15, 2026: 201 critical, 835 high. 1 is now in CISA KEV.
- Published
- 1,426
- Critical
- 201
- High
- 835
- Medium
- 341
- Low
- 49
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 357
Most affected products
- Google Android
- 96
- Oracle Hyperion Financial Management
- 81
- Mozilla Firefox · Mozilla Thunderbird
- 74
- Google Chrome
- 42
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- 38
- Concrete CMS
- 31
- Oracle Business Intelligence Enterprise Edition
- 29
- Oracle Siebel CRM Deployment
- 29
- Oracle Commerce Guided Search / Oracle Commerce Experience…
- 27
- Oracle WebCenter Portal
- 24
Critical 201
- CVE-2026-15640Authentication Bypass via SAML Response ManipulationDelinea Secret Server
- CVE-2026-15639Reflected Cross-Site ScriptingDelinea Secret Server
- CVE-2026-15638Cryptographic Padding OracleDelinea Secret Server
- CVE-2026-73807mySCADA myPRO Manager Missing AuthorizationmySCADA Technologies mySCADA myPRO
- CVE-2026-81855Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic KeyWärtsilä FOS-Onboard
- CVE-2026-78225Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic KeyWärtsilä FOS-Onboard
- CVE-2026-61560@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeoverzereight gitlab-mcp · @zereight/mcp-gitlab
- CVE-2026-73437On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper/destinatArista Networks EOS
- CVE-2026-68491An insufficient check allowed for the overwrite of arbitrary files via a symlink.Webpros SolusVM
- CVE-2026-61559@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgeryzereight gitlab-mcp · @zereight/mcp-gitlab
- CVE-2026-91939Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci ParameterCotonti
- CVE-2026-61568@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transportzereight gitlab-mcp · @zereight/mcp-gitlab
- CVE-2026-91738Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code oGoogle Chrome
- CVE-2026-91729Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execGoogle Chrome
- CVE-2026-91716Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via aGoogle Chrome
- CVE-2026-91718Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via aGoogle Chrome
- CVE-2026-91710Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sanGoogle Chrome
- CVE-2026-91728Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a Google Chrome
- CVE-2026-91749Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside thGoogle Chrome
- CVE-2026-66887Missing Authorization in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-66890Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-54337Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/OverwriteShaneIsrael fireshare
- CVE-2026-87230Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87223Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87217Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87214Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87189Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87188Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87186Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87184Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87176Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87175Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87173Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87172Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87170Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87129Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87128Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-83462Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83452Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).Oracle Document Management and Collaboration
- CVE-2026-83355Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: Metrics).Oracle Enterprise Manager for Fusion Middleware
- CVE-2026-83339Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83327Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-89040Tencent Mass Service Engine in Cluster (MSEC) path traversalTencent Mass Service Engine in Cluster
- CVE-2026-83283Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83282Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83269Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83268Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83261Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Core).Oracle Product Lifecycle Analytics
- CVE-2026-83260Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX).Oracle Agile PLM
- CVE-2026-83232Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer).Oracle Data Integrator
- CVE-2026-83229Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console).Oracle Siebel CRM Deployment
- CVE-2026-83202Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83201Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83197Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts).Oracle Siebel Apps - Financial Services
- CVE-2026-83196Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83154Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83151Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-83149Vulnerability in Oracle Application Testing Suite.Oracle Application Testing Suite
- CVE-2026-83108Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83107Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83105Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83104Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83103Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83100Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83099Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83098Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83095Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83094Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83066Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83064Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83062Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83061Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83060Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83059Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83058Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83057Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83056Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83055Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83054Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83043Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-83042Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-83040Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-83039Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-83038Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration).Oracle WebLogic Server
- CVE-2026-83037Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83036Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83035Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83031Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83029Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).Oracle Managed File Transfer
- CVE-2026-83027Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83021Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2026-83020Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-83006Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83001Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-83000Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-82999Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-82998Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-82997Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).Oracle Service Delivery Platform
- CVE-2026-82995Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-82994Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-73963Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73962Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73961Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces).Oracle JDeveloper
- CVE-2026-73957Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73956Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-73953Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73952Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73950Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73948Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-73947Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73946Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73945Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73944Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73940Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-71163Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-71133Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-70913Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager
- CVE-2026-70757Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-70756Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-70748Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2026-92240Out-of-bounds read in IMAP response parserMozilla Thunderbird
- CVE-2026-92238Ambiguous parsing of mail headersMozilla Thunderbird
- CVE-2026-76675Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76674Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76673Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76672Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76670Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76669Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-69204Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)http4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-56960In multiple locations, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-55366In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code.Google Android
- CVE-2026-19773libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitylibwebsockets
- CVE-2026-11921Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-61667DIRAC: RCE in FileCatalog DatasetManager via SQL injection + evalDIRACGrid DIRAC · dirac
- CVE-2026-53459Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpointsmaziggy bambuddy
- CVE-2026-45579DIRAC: RCE in RequestManager due to eval on untrusted inputDIRACGrid DIRAC · dirac
- CVE-2026-11928Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-12351IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injectionIBM MQ
- CVE-2026-53710MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_serverIBM mcp-context-forge · mcp-contextforge-gateway
- CVE-2026-46488motionEye: Authentication possible via password hashmotioneye-project motioneye · motioneye
- CVE-2024-58385Yonyou U8 CRM SQL Injection via fillbacksettingedit.phpYonyou U8 CRM
- CVE-2023-54398Yonyou U8 Cloud Java Deserialization RCE via FileManageServletYonyou U8 Cloud
- CVE-2026-89026Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originateIssabel Foundation Issabel Framework
- CVE-2026-89022BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusionbookstackapp bookstack
- CVE-2026-77866SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hostsSlab safeurl
- CVE-2026-77972safeurl validated address is not bound to the request, allowing DNS rebindingSlab safeurl
- CVE-2026-55211surfio IRAP header size fields cause out-of-bounds readsequinor surfio · surfio
- CVE-2026-91988atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCPdep0we atomic-agents-stack · atomic-agents-stack
- CVE-2026-91949FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation BypassFreeRDP
- CVE-2024-14029Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encodingtornadoweb tornado · tornado
- CVE-2023-54397Tornado before 6.3.3 HTTP Request Smuggling via Content-Lengthtornadoweb tornado · tornado
- CVE-2026-61549Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backendwoodpecker-ci woodpecker · github.com/woodpecker-ci/wood… +3
- CVE-2026-63696Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability.Dell SmartFabric OS10 Software
- CVE-2026-63695Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability.Dell SmartFabric OS10 Software
- CVE-2026-55158Conflibot: Command injection via crafted pull request branch names under pull_request_targetwktk conflibot
- CVE-2026-39919Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output AdapterArtifex Software Ghostscript
- CVE-2026-59971MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)designcomputer mysql_mcp_server · mysql-mcp-server
- CVE-2026-46495OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMIOpenIdentityPlatform OpenDJ · org.openidentityplatform.o… +1
- CVE-2026-77179Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackDocker Sandboxes
- CVE-2026-92079Mitigation bypass in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92075Mitigation bypass in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92071Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92066Sandbox escape in the Profile Backup componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92061Incorrect boundary conditions in the Security: Process Sandboxing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92059Incorrect boundary conditions in the DOM: Editor componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92057Mitigation bypass in the Enterprise Policies componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92051Spoofing issue due to invalid pointer in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92050Sandbox escape due to race condition in the XPConnect componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92048Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92045Sandbox escape due to incorrect boundary conditions in the WebRTC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92041Mitigation bypass in the DOM: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92038Mitigation bypass in the Remote Settings Client componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92037Incorrect boundary conditions in the DOM: Animation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92036Incorrect boundary conditions in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92035Sandbox escape due to incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92034Site isolation issue in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92032Sandbox escape due to invalid pointer in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92018Sandbox escape in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-89308Arbitrary command execution in TrxTimeATTENDANCETREXOM TrxTimeATTENDANCE
- CVE-2026-91998Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcpcasdoor
- CVE-2026-91995pig before 4.1.0 Unverified Password Change via /register/passwordpig-mesh pig
- CVE-2026-52824Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeoverkimai · kimai/kimai
- CVE-2026-57147praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgeryMervinPraison PraisonAI · MervinPraison praisonai-platfo… +1
- CVE-2026-57148praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)MervinPraison PraisonAI · MervinPraison praisonai-platfo… +1
- CVE-2026-57140PraisonAI AgentOS exposes unauthenticated agent listing and invocationMervinPraison PraisonAI · praisonai
- CVE-2026-57139PraisonAI MCPServer exposes unauthenticated HTTP tools/callMervinPraison PraisonAI · praisonai
- CVE-2026-57138PraisonAI codeMode sandbox escape via Function constructorMervinPraison PraisonAI · praisonai
- CVE-2026-57141PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` ToolMervinPraison PraisonAI · praisonai
- CVE-2026-48717OpenAM OAuth Authorization Bypass via PKCE ChallengeOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45051OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator StorageOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-62263OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypassOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-46619OpenAM Authentication Bypass via MSISDN LDAP InjectionOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-62379OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallbackOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45052OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery EndpointsOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-90711proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnetproxy-addr
- CVE-2026-91003D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflowD-Link DI-8300
- CVE-2026-91001D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflowD-Link DI-8400
- CVE-2026-90847EFM ipTIME C200E System Setup iux_set.cgi os command injectionEFM ipTIME C200E
- CVE-2026-37152TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.
- CVE-2026-79303kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injection.
- CVE-2026-88617SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint.
High 835
- CVE-2026-73459Security Advisory 0160Arista Networks EOS
- CVE-2026-73446Security Advisory 0160Arista Networks EOS
- CVE-2026-85893Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2026-69486Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-92248Gimp: integer overflow when generating a thumbnail preview for a psd fileGNOME GIMP · Red Hat Enterprise Linux
- CVE-2026-92256Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read HandlersNetcore NR255-V
- CVE-2026-76871Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read HandlersNetcore NR255-V
- CVE-2026-76870Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload ValidationNetcore NR255-V
- CVE-2026-76869Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgiNetcore NR255-V
- CVE-2026-76866Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS ParametersNetcore NR255-V
- CVE-2026-76862Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch PathsNetcore NR255-V
- CVE-2026-76861Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgiNetcore NR255-V
- CVE-2026-76860Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID TokenizationNetcore NR255-V
- CVE-2026-76859Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgiNetcore NR255-V
- CVE-2026-76857Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgiNetcore NR255-V
- CVE-2026-76856Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration EndpointsNetcore NR255-V
- CVE-2026-76855Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit EndpointsNetcore NR255-V
- CVE-2026-76854Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgiNetcore NR255-V
- CVE-2026-76853Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgiNetcore NR268
- CVE-2026-76852Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_writeNetcore NR268
- CVE-2026-83368Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component: CompileOracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,…
- CVE-2026-83408Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM for JDK, Oracle GraalVM
- CVE-2026-83357Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM for JDK, Oracle GraalVM
- CVE-2026-10144Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handlingweb-infra-dev rsbuild
- CVE-2026-92000adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Sizecthackers adm-zip · adm-zip
- CVE-2026-61554emp3r0r has an unauthenticated HTTP Polling DoSjm33-m0 emp3r0r · github.com/jm33-m0/emp3r0r/core
- CVE-2026-91722Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the Google Chrome
- CVE-2026-91745Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-91715Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-91711Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the Google Chrome
- CVE-2026-91737Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-91736Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-91735Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-91709Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbGoogle Chrome
- CVE-2026-91741Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandboGoogle Chrome
- CVE-2026-91733Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-91731Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandboxGoogle Chrome
- CVE-2026-91748Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer prGoogle Chrome
- CVE-2026-91712Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer prGoogle Chrome
- CVE-2026-91743Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2026-91727Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised Google Chrome
- CVE-2026-91734Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outGoogle Chrome
- CVE-2026-91724Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentGoogle Chrome
- CVE-2026-91721Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside Google Chrome
- CVE-2026-79994Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink raceDocker Sandboxes
- CVE-2026-68950Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-68070Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-54544Fireshare has unauthenticated SSRF via missing login_required on webhook test endpointsShaneIsrael fireshare
- CVE-2026-88065`tts-be` application has a Broken Access Control vulnerabilityNIAEFEUP tts-be
- CVE-2026-87289Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content).Oracle Helidon
- CVE-2026-87277Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87276Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87273Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87272Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87271Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87270Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87269Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87268Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87266Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-87265Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).Oracle Purchasing
- CVE-2026-87264Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-87262Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-87261Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-87260Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-87259Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication InterfaceOracle Agile Engineering Data Management
- CVE-2026-87258Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments).Oracle Agile PLM
- CVE-2026-87257Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK).Oracle Agile PLM
- CVE-2026-87256Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-87254Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments).Oracle Agile PLM
- CVE-2026-87250Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87249Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87247Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87246Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87245Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87244Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87243Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87242Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87241Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87240Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87239Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87238Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87237Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87236Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87235Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87234Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87233Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87232Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87231Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87229Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87228Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87227Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87226Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87225Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87224Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87222Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87221Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87220Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87219Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87218Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87216Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87215Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87213Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87212Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87211Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87210Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87209Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87208Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87207Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87206Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87205Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87204Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87203Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87202Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87201Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87200Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87199Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87198Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87197Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87196Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87195Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87194Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87193Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87192Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87191Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87190Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87187Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87185Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87183Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87182Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87181Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87180Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87179Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87178Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87177Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87174Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87171Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87168Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing).Oracle Purchasing
- CVE-2026-87167Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing).Oracle Purchasing
- CVE-2026-87166Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).Oracle Purchasing
- CVE-2026-87165Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: ECC For Award andOracle Contract Lifecycle Management for Public Sector
- CVE-2026-87164Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports).Oracle Banking Branch
- CVE-2026-87163Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).Oracle Purchasing
- CVE-2026-87162Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).Oracle Contract Lifecycle Management for Public Sector
- CVE-2026-87161Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-87160Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-87159Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations).Oracle HRMS
- CVE-2026-87158Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Enterprise Command Center).Oracle Order Management
- CVE-2026-87157Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-87156Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-87155Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-87154Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-87153Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-87152Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).Oracle Installed Base
- CVE-2026-87151Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).Oracle Bills of Material
- CVE-2026-87150Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).Oracle Bills of Material
- CVE-2026-87149Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO).Oracle Contract Lifecycle Management for Public Sector
- CVE-2026-87148Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87147Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87146Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87145Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87144Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87143Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87142Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87141Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87140Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87139Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87138Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87137Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87136Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87135Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87134Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87133Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87132Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87131Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87130Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2026-87127Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing).Oracle Purchasing
- CVE-2026-87126Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Reports Security).Oracle Report Manager
- CVE-2026-87125Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations).Oracle Financials for Asia/Pacific
- CVE-2026-87124Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).Oracle iRecruitment
- CVE-2026-83490Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).Oracle iRecruitment
- CVE-2026-83489Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Onboarding Batch Processes).Oracle Banking Origination
- CVE-2026-83487Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).Oracle Product Hub
- CVE-2026-83486Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).Oracle Product Hub
- CVE-2026-83485Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).Oracle Product Hub
- CVE-2026-83484Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations).Oracle US Federal Human Resources
- CVE-2026-83483Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis).Oracle Advanced Benefits
- CVE-2026-83482Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).Oracle Contracts
- CVE-2026-83481Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).Oracle Contracts
- CVE-2026-83479Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).Oracle Contracts
- CVE-2026-83477Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches).Oracle Work in Process
- CVE-2026-83465Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83464Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83463Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83461Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).Oracle Mobile Application Server
- CVE-2026-83457Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83456Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83455Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83454Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).Oracle Document Management and Collaboration
- CVE-2026-83453Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).Oracle Document Management and Collaboration
- CVE-2026-83451Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Workbench
- CVE-2026-83450Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).Oracle Bills of Material
- CVE-2026-83449Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-83448Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-83447Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-83446Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components).Oracle Financials Common Modules
- CVE-2026-83445Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-83444Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-83442Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-83440Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-83439Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper).Oracle Helidon
- CVE-2026-83438Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations).Oracle Engineering
- CVE-2026-83437Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).Oracle Engineering
- CVE-2026-83436Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management).Oracle Depot Repair
- CVE-2026-83435Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).Oracle Bills of Material
- CVE-2026-83434Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Workbench
- CVE-2026-83432Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2026-83430Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Workbench
- CVE-2026-83429Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83428Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).Oracle Demand Signal Repository
- CVE-2026-83425Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations).Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-83424Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper).Oracle JDeveloper
- CVE-2026-83423Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).Oracle JDeveloper
- CVE-2026-83422Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-83420Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft (component: Engineering).Oracle PeopleSoft Enterprise FIN Engineering Brazil
- CVE-2026-83418Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPOracle Communications Cloud Native Core Security Edge Prote…
- CVE-2026-83417Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPOracle Communications Cloud Native Core Security Edge Prote…
- CVE-2026-83415Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83412Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83411Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83410Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83356Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite (component: Security).Oracle Enterprise Command Center Framework
- CVE-2026-83353Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).Oracle WebCenter Content
- CVE-2026-83352Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).Oracle XML Gateway
- CVE-2026-83351Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83350Vulnerability in the Oracle Net Services component of Oracle Database Server.Oracle Database Server
- CVE-2026-83349Vulnerability in the Oracle Net Services component of Oracle Database Server.Oracle Database Server
- CVE-2026-83348Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83345Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).Oracle XML Gateway
- CVE-2026-83344Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Database Application Table).Oracle Identity Manager Connector
- CVE-2026-83343Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).Oracle Utilities Network Management System
- CVE-2026-83342Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).Oracle Utilities Network Management System
- CVE-2026-83341Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).Oracle Applications Manager
- CVE-2026-83340Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security).Oracle Identity Manager
- CVE-2026-83338Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).Oracle Applications Manager
- CVE-2026-83337Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent).Oracle Middleware Common Libraries and Tools
- CVE-2026-83336Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83335Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83334Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).Oracle Web Services Manager
- CVE-2026-83333Vulnerability in the Oracle Net Services component of Oracle Database Server.Oracle Database Server
- CVE-2026-83332Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83331Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83330Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket).Oracle Helidon
- CVE-2026-83329Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83328Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83326Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).Oracle Siebel CRM Integration
- CVE-2026-83325Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83324Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83323Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83322Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83321Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Actions).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83320Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration).Oracle BI Publisher
- CVE-2026-83319Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).Oracle BI Publisher
- CVE-2026-83318Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration).Oracle BI Publisher
- CVE-2026-83317Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Installation).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83316Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83315Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83314Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API).Oracle BI Publisher
- CVE-2026-83313Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83312Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: E-Business Suite - XDO).Oracle BI Publisher
- CVE-2026-83311Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83310Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83309Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2026-83308Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83307Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83306Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services).Oracle JDeveloper
- CVE-2026-83305Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83304Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83303Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83302Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security).Oracle BI Publisher
- CVE-2026-83301Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Service Administration UI).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83300Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).Oracle XML Gateway
- CVE-2026-83299Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83298Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83297Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83296Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83295Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83294Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83293Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: FNDN).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83292Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83291Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83290Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83289Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83288Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83287Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83286Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83285Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83284Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).Oracle BI Publisher
- CVE-2026-83281Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver).Oracle Helidon
- CVE-2026-83280Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2).Oracle Helidon
- CVE-2026-83277Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).Oracle Agile PLM MCAD Connector
- CVE-2026-83276Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2).Oracle Helidon
- CVE-2026-83273Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83272Vulnerability in the Oracle Text component of Oracle Database Server.Oracle Database Server
- CVE-2026-83271Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83270Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83267Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security).Oracle BI Publisher
- CVE-2026-83266Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services).Oracle JDeveloper
- CVE-2026-83265Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Agent).Oracle Web Services Manager
- CVE-2026-83264Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-83263Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-83262Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues).Oracle Product Lifecycle Analytics
- CVE-2026-83259Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83258Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83257Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83256Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83255Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83254Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83253Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca ApplicOracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83252Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83249Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83248Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83247Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83246Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83245Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83244Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83243Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience MaOracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83242Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience MaOracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83241Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83240Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83239Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca ApplicOracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83238Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83237Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83236Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience MaOracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83235Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience MaOracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83234Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience MaOracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83233Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience MaOracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83231Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-dbclient-mongodb).Oracle Helidon
- CVE-2026-83230Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console).Oracle Siebel CRM Deployment
- CVE-2026-83228Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83227Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).Oracle Siebel CRM Integration
- CVE-2026-83226Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83225Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83224Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83223Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Remote).Oracle Siebel CRM Deployment
- CVE-2026-83222Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83221Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).Oracle Siebel CRM Integration
- CVE-2026-83220Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe).Oracle Siebel CRM Integration
- CVE-2026-83219Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83218Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83217Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83216Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83215Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83214Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83213Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Reports).Oracle Siebel CRM End User
- CVE-2026-83212Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training).Oracle Siebel Apps - Self Service
- CVE-2026-83211Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83210Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83209Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow).Oracle Siebel CRM Development
- CVE-2026-83208Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration).Oracle Siebel CRM Deployment
- CVE-2026-83207Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting).Oracle Siebel CRM Development
- CVE-2026-83206Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications (component: Base)Oracle Banking Corporate Lending Process Management
- CVE-2026-83205Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2026-83204Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Internal Operations).Oracle Sourcing
- CVE-2026-83203Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83199Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83195Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83194Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations).Oracle Depot Repair
- CVE-2026-83193Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: Life Sciences).Oracle Siebel Apps - Life Sciences
- CVE-2026-83192Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83191Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83190Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83189Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation).Oracle User Management
- CVE-2026-83188Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations).Oracle Depot Repair
- CVE-2026-83187Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).Oracle Common Applications Calendar
- CVE-2026-83186Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).Oracle Common Applications Calendar
- CVE-2026-83185Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2026-83184Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83183Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83182Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools).Oracle Siebel CRM Development
- CVE-2026-83181Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces).Oracle Siebel CRM Development
- CVE-2026-83180Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83179Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).Oracle Common Applications Calendar
- CVE-2026-83178Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83177Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-83176Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2026-83174Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Application Framework).Oracle CRM Technical Foundation
- CVE-2026-83173Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-83172Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: OSO Other).Oracle Sales Online
- CVE-2026-83171Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-83170Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents).Oracle One-to-One Fulfillment
- CVE-2026-83169Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues).Oracle One-to-One Fulfillment
- CVE-2026-83168Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).Oracle Applications Manager
- CVE-2026-83167Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83166Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2026-83165Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: User Interface).Oracle Customer Interaction History
- CVE-2026-83164Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2026-83163Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Attachments / File Upload).Oracle Application Object Library
- CVE-2026-83162Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83161Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle Project Intelligence
- CVE-2026-83160Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83159Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch).Oracle Applications DBA
- CVE-2026-83158Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).Oracle Applications Manager
- CVE-2026-83157Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).Oracle Applications Manager
- CVE-2026-83156Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server.Oracle Database Server
- CVE-2026-83155Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83153Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).Oracle Siebel CRM Deployment
- CVE-2026-83152Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle Project Intelligence
- CVE-2026-83150Vulnerability in Oracle Application Testing Suite.Oracle Application Testing Suite
- CVE-2026-83148Vulnerability in Oracle Application Testing Suite.Oracle Application Testing Suite
- CVE-2026-83147Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory).Oracle PeopleSoft Enterprise FIN Inventory Brazil
- CVE-2026-83146Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI).Oracle Siebel CRM End User
- CVE-2026-83145Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).Oracle Siebel Apps - Customer Order Management
- CVE-2026-83144Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management).Oracle Siebel Apps - Customer Order Management
- CVE-2026-83143Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing).Oracle Siebel Apps - Life Sciences
- CVE-2026-83142Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations).Oracle Proposals
- CVE-2026-83141Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83138Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Spares Management
- CVE-2026-83137Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Spares Management
- CVE-2026-83136Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Spares Management
- CVE-2026-83135Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2026-83134Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2026-83133Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2026-83132Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2026-83131Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download).Oracle Web Applications Desktop Integrator
- CVE-2026-83130Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Site Hub
- CVE-2026-83129Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales
- CVE-2026-83128Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales Offline
- CVE-2026-83127Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales Offline
- CVE-2026-83126Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales Online
- CVE-2026-83125Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Report Manager
- CVE-2026-83124Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations).Oracle Sales Online
- CVE-2026-83123Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Report Manager
- CVE-2026-83122Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations).Oracle Report Manager
- CVE-2026-83121Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83120Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations).Oracle Alert
- CVE-2026-83119Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations).Oracle User Management
- CVE-2026-83118Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-83117Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).Oracle Applications DBA
- CVE-2026-83116Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).Oracle Order Management
- CVE-2026-83115Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone).Oracle Applications Manager
- CVE-2026-83114Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).Oracle Quality
- CVE-2026-83113Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).Oracle Quality
- CVE-2026-83112Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Lease and Finance Management
- CVE-2026-83111Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Partner Management
- CVE-2026-83110Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83106Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83102Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83101Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83096Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83093Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83092Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83091Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83090Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Spares Management
- CVE-2026-83089Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations).Oracle Alert
- CVE-2026-83088Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database Server
- CVE-2026-83087Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83086Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83085Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83084Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83083Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83082Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).Oracle Marketing
- CVE-2026-83081Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).Oracle Banking Corporate Lending
- CVE-2026-83080Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports).Oracle Banking Branch
- CVE-2026-83079Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83078Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83075Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83074Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83073Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83072Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl.Oracle Applications Framework
- CVE-2026-83071Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning).Oracle Business Intelligence Enterprise Edition
- CVE-2026-83070Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: Enterprise Portal).Oracle PeopleSoft Enterprise PRTL Interaction Hub
- CVE-2026-83069Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework).Oracle Fusion Middleware Control
- CVE-2026-83068Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core).Oracle Enterprise Manager for Oracle Database
- CVE-2026-83067Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components).Oracle JDeveloper
- CVE-2026-83065Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83063Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).Oracle Internet Directory
- CVE-2026-83053Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83052Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83051Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83050Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83049Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2026-83048Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83047Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83046Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83045Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).Oracle WebCenter Portal
- CVE-2026-83044Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).Oracle XML Gateway
- CVE-2026-83041Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-83034Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83033Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83032Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).Oracle WebCenter Sites
- CVE-2026-83030Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).Oracle Managed File Transfer
- CVE-2026-83028Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83026Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83025Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83024Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83023Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager Connector
- CVE-2026-83022Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83019Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83018Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83017Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83016Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83015Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83014Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-83013Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83012Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83011Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-83010Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83009Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83008Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83007Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83005Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83004Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83003Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).Oracle WebCenter Enterprise Capture
- CVE-2026-83002Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-82996Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars).Oracle Platform Security for Java
- CVE-2026-82993Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-82992Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation).Oracle Siebel CRM Deployment
- CVE-2026-73966Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).Oracle Siebel Apps - Marketing
- CVE-2026-73960Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-73959Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2026-73958Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73955Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-73954Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-73951Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73949Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).Oracle WebCenter Portal
- CVE-2026-73943Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-73942Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).Oracle Identity Manager
- CVE-2026-73941Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-73926Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2026-71047Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager
- CVE-2026-70915Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).Oracle Identity Manager
- CVE-2026-87288Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM
- CVE-2026-87287Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM
- CVE-2026-87286Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).Oracle GraalVM
- CVE-2026-61544libp2p-quic: Remote panic via certificate expiry race during QUIC handshakerust-libp2p · libp2p-quic
- CVE-2026-92239Buffer overrun in IMAPMozilla Thunderbird
- CVE-2026-76820OpenCTI: Synchronizer SSRF: stream fetch has no URL validationOpenCTI-Platform opencti
- CVE-2026-76821OpenCTI: User-Controlled ReDoS in JSON Ingestion MapperOpenCTI-Platform opencti
- CVE-2026-88975Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZEhttp4s · org.http4s:http4s-ember-core_2.13 +2
- CVE-2026-73458On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rouArista Networks EOS
- CVE-2026-69202Http4s Ember HTTP/2: unbounded inbound body bufferinghttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-76693Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76692Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76691Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API EndpointHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76690Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76689Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76688Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76687Authenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76686Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76685Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76684Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator APIHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76683Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76682Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76681Authenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator APIHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76680Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN OrchestratorHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76679Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76678Authenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76677Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76676Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-69218Http4s Ember HTTP/2: unbounded continuation frame accumulationhttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69203Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMShttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69217Http4s: Ember Server accepts duplicate Content-Length headershttp4s
- CVE-2026-69210Http4s: WebSocket decoder accepts negative length, causing infinite decode loophttp4s
- CVE-2026-69205Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)http4s · org.http4s:http4s-ember-core_3 +2
- CVE-2026-13327Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a network-positiDevolutions Server
- CVE-2026-69213Http4s Ember HTTP/2: unbounded outbound frame queuehttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69209Http4s: WebSocket decoder accepts unbounded message sizeshttp4s
- CVE-2026-78081Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com J2Store extension for Joomla
- CVE-2026-81568Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com J2Store extension for Joomla
- CVE-2026-69208Http4s: DigestAuth nonce map grows unboundedhttp4s · org.http4s:http4s-ember-server_2.12 +2
- CVE-2026-81567Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com J2Store extension for Joomla
- CVE-2026-82189Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com J2Store extension for Joomla
- CVE-2026-58766In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-58744In multiple locations, there is a possible escalation of privilege due to improper input validation.Google Android
- CVE-2026-58734In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition.Google Android
- CVE-2026-58728In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition.Google Android
- CVE-2026-58724In multiple locations, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-58710In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58704In Cellular Modem, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58701In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition.Google Android
- CVE-2026-58699In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check.Google Android
- CVE-2026-58695In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check.Google Android
- CVE-2026-58691In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation.Google Android
- CVE-2026-58683In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-58679In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code.Google Android
- CVE-2026-58678In Bootloader, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-57014In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-57012In the Setup Wizard, there is a possible remote package install due to a missing permission check.Google Android
- CVE-2026-57008In Modem, there is a possible information disclosure due to improper input validation.Google Android
- CVE-2026-56997In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-56986In multiple files, there is a possible out-of-bounds read due to type confusion.Google Android
- CVE-2026-56985In multiple files, there is a possible way to obtain signatures due to type confusion.Google Android
- CVE-2026-56982In VPU, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-56978In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-56974In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-56970In multiple locations, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-56967In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-56945In VPU, there is a possible out-of-bounds write due to a confused deputy.Google Android
- CVE-2026-56942In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-56941In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-56920In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code.Google Android
- CVE-2026-56914In multiple locations, there is a possible use-after-free due to improper locking.Google Android
- CVE-2026-56882In Cellular Modem, there is a possible information disclosure due to a logic error in the code.Google Android
- CVE-2026-56881In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-55359In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-55351In VPU, there is a possible out-of-bounds write due to an integer overflow.Google Android
- CVE-2026-55343In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-55331In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-55323In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-55318In multiple locations, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-55306In Cellular Modem, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-55301In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-0200In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-0199In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-0194In multiple locations, there is a possible permission bypass due to an integer overflow.Google Android
- CVE-2026-0189In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-0171In multiple locations, there is a possible out-of-bounds write due to a logic error in the code.Google Android
- CVE-2026-0170In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-0159In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-92176pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerabilitypdfforge PDF Architect
- CVE-2026-92177pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitypdfforge PDF Architect
- CVE-2026-92178pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerabilitypdfforge PDF Architect
- CVE-2026-92179pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitypdfforge PDF Architect
- CVE-2026-92180pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerabilitypdfforge PDF Architect
- CVE-2026-19781Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAshlar-Vellum Cobalt
- CVE-2026-19886OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-19885OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityOriginLab Origin Viewer
- CVE-2026-19774BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution VulnerabilityBlueZ
- CVE-2026-85234Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engineRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-81899Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboardConcrete CMS
- CVE-2026-57441MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalencebitbonsai mcpvault · @bitbonsai/mcpvault
- CVE-2026-58483mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`ihor-sokoliuk mcp-searxng · mcp-searxng
- CVE-2026-40058Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for WindowsCrowdStrike Falcon sensor for Windows · CrowdStrike Laroux…
- CVE-2026-58485mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`ihor-sokoliuk mcp-searxng · mcp-searxng
- CVE-2026-81238Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.Dell Wyse Management Suite
- CVE-2026-81235Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability.Dell Wyse Management Suite
- CVE-2026-11728IBM MQ .NET client is vulnerable to remote code executionIBM MQ
- CVE-2026-56827Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliersshopperlabs shopper · shopper/framework
- CVE-2026-81240Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.Dell Wyse Management Suite
- CVE-2026-56829Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock componentshopperlabs shopper · shopper/framework
- CVE-2026-18115In Concrete CMS 9.2.0 to 9.5.2, Missing Authorization in REST API Users update() and change_password Enables Account Takeover.Concrete CMS
- CVE-2026-56825Shopper: Missing authorization on product removal actions in CollectionProducts componentshopperlabs shopper · shopper/framework
- CVE-2026-58502githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflowgouef githubtoplanguages
- CVE-2026-81239Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.Dell Wyse Management Suite
- CVE-2026-13210Incorrect Authorization in GitLabGitLab
- CVE-2026-81236Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.Dell Wyse Management Suite
- CVE-2026-18113Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page NamesConcrete CMS
- CVE-2026-11729IBM MQ Java messaging is vulnerable to remote code executionIBM MQ
- CVE-2026-81898Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via country-less Address attribute in Express association viewsConcrete CMS
- CVE-2026-61668DIRAC: Pilot code downloaded over unverified HTTPS connectionDIRACGrid DIRAC · dirac
- CVE-2026-11926Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-11929Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-54549Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetchpipeboard-co meta-ads-mcp · meta-ads-mcp
- CVE-2026-54547Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Tokenpipeboard-co meta-ads-mcp · meta-ads-mcp
- CVE-2026-11934Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-12101Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-55225Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`strimzi-kafka-operator · io.strimzi:strimzi
- CVE-2026-12150IBM MQ queue manager is vulnerable to denial of serviceIBM MQ
- CVE-2026-54251netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Servicenetty-incubator-codec-ohttp · io.netty.incubator netty-i… +1
- CVE-2026-12354IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injectionIBM MQ
- CVE-2026-12355IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code executionIBM MQ
- CVE-2026-12358Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-44300OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injectionopencost · github.com/opencost/opencost
- CVE-2026-12666IBM MQ Java messaging is vulnerable to XML external entity injectionIBM MQ
- CVE-2026-12667IBM MQ .NET client is vulnerable to XML external entity injectionIBM MQ
- CVE-2026-12728IBM MQ Java messaging is vulnerable to remote code executionIBM MQ
- CVE-2026-88765Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabGitLab
- CVE-2026-12752Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026IBM Business Automation Workflow containers and traditional
- CVE-2026-21588This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2,Atlassian Confluence Data Center
- CVE-2026-21587This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center.Atlassian Jira Service Management Data Center
- CVE-2026-21586This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, Atlassian Confluence Data Center
- CVE-2026-58201Lokka: Azure Resource Manager URL path validation issuemerill lokka · @merill/lokka
- CVE-2026-81897Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via Express form Text control save_controlConcrete CMS
- CVE-2026-81896Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question LabelConcrete CMS
- CVE-2026-63443Coder: Workspace agent API insecure redirect handling allowed cross-agent file read and writecoder · github.com/coder/coder +1
- CVE-2026-18111Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity verificationConcrete CMS
- CVE-2026-81895Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`Concrete CMS
- CVE-2026-59160Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/runDerYeger yeger · @yeger/turbo-graph
- CVE-2026-81894Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption fieldConcrete CMS
- CVE-2026-55691EmbedVideo Extension : Stored XSS via unsanitized class passed to templateStarCitizenWiki mediawiki-extensions-EmbedVideo · starcitiz…
- CVE-2026-55690EmbedVideo Extension: Stored XSS via unsanitized service name in exception textStarCitizenWiki mediawiki-extensions-EmbedVideo · starcitiz…
- CVE-2026-18110Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an unauthenticated attacker to retrieve the complete backend user directory — internal ID, usernameConcrete CMS
- CVE-2026-55692EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabledStarCitizenWiki mediawiki-extensions-EmbedVideo · starcitiz…
- CVE-2026-55149Vouch Proxy: Unbounded Multipart Cookie Allocation DoSvouch-proxy · github.com/vouch/vouch-proxy
- CVE-2026-58200@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signingjhb-software payload-plugins · @jhb.software/payload-cloudi…
- CVE-2026-19780Koha Eval Code Injection Remote Code Execution VulnerabilityKoha
- CVE-2026-59965@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omissionjhb-software payload-plugins · @jhb.software payload-alt… +1
- CVE-2026-55887MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gatewaydocker mcp-gateway · github.com/docker/mcp-gateway
- CVE-2026-55864GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Toolcore-geonetwork · org.geonetwork-opensource:gn-web-app
- CVE-2026-19407GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDKGoogle Cloud Gemini Enterprise Agent Platform SDK for Python
- CVE-2026-87792Multiple authorization bypass in WordPress theme design-scuole-wordpress-themeDevelopers Italia design-scuole-wordpress-theme
- CVE-2026-91992Tornado before 6.5.7 Credential Leak via Handle Reusetornadoweb tornado · tornado
- CVE-2026-65831ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file readArcadeData arcadedb · com.arcadedb arcadedb-server +1
- CVE-2026-91990Tornado before 6.5.8 Memory Amplification DoS via multiparttornadoweb tornado · tornado
- CVE-2026-91989atomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.pydep0we atomic-agents-stack · atomic-agents-stack
- CVE-2026-91987atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Modeldep0we atomic-agents-stack · atomic-agents-stack
- CVE-2026-91985Vikunja before 2.6.0 Privilege Escalation via Link Share Hashgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91973Vikunja before 2.6.0 Authentication Bypass via CalDAV BasicAuthgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91972Vikunja before 2.6.0 Authentication Bypass via Unthrottled APIgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91971Vikunja before 2.6.0 Denial of Service via Avatar Uploadgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91965WWBN AVideo through 29.0 Broken Access Control via Live EndpointsWWBN AVideo
- CVE-2026-91964FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingTokenFreeRDP
- CVE-2026-91963FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrcFreeRDP
- CVE-2026-91961FreeRDP before 3.31.0 Denial of Service via URBDRCFreeRDP
- CVE-2026-91956FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRCFreeRDP
- CVE-2026-91955FreeRDP before 3.31.0 Denial of Service via Desktop DimensionsFreeRDP
- CVE-2026-91954FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodecFreeRDP
- CVE-2026-91953FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFOFreeRDP
- CVE-2026-91952FreeRDP before 3.31.0 Denial of Service via pool_decode_rectFreeRDP
- CVE-2026-91951FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrcFreeRDP
- CVE-2026-91950FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 WraparoundFreeRDP
- CVE-2026-91948FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOLFreeRDP
- CVE-2026-91947FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVCFreeRDP
- CVE-2026-91946FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphicsFreeRDP
- CVE-2026-91945FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATRFreeRDP
- CVE-2026-91943Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategyunclecode crawl4ai
- CVE-2026-91941Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategyunclecode crawl4ai
- CVE-2026-91940crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategyunclecode crawl4ai
- CVE-2026-91938Flowise before 3.1.4 Server-Side Request Forgery via document loadersFlowiseAI Flowise
- CVE-2026-91937Flowise before 3.1.4 NoSQL Injection via sessionIdFlowiseAI Flowise
- CVE-2026-91935Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model NodesFlowiseAI Flowise
- CVE-2026-91934Flowise before 3.1.4 Remote Code Execution via SQL Database ChainFlowiseAI Flowise
- CVE-2026-91933Flowise before 3.1.4 Authorization Bypass via openai-realtimeFlowiseAI Flowise
- CVE-2026-91932Flowise before 3.1.4 Remote Code Execution via cwd ParameterFlowiseAI Flowise
- CVE-2026-91931Flowise before 3.1.4 Remote Code Execution via Custom MCP npxFlowiseAI Flowise
- CVE-2026-91930Flowise before 3.1.4 Cross-Tenant Organization Admin TakeoverFlowiseAI Flowise
- CVE-2026-91929Flowise before 3.1.4 Cross-Tenant Authorization BypassFlowiseAI Flowise
- CVE-2026-54077ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated usersArcadeData arcadedb · com.arcadedb arcadedb-engine +1
- CVE-2026-54076ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)ArcadeData arcadedb · com.arcadedb arcadedb-engine +1
- CVE-2026-59973mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapiagentfront frontmcp · agentfront mcp-from-openapi +4
- CVE-2026-87791Path traversal vulnerability in WordPress theme design-scuole-wordpress-themeDevelopers Italia design-scuole-wordpress-theme
- CVE-2026-85013Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharactersRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-55178GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile datageolens-io geolens · @geolens/sdk +2
- CVE-2026-53966XWiki Platform: Privilege escalation from edit to script right through Live Data editingxwiki-platform · org.xwiki.platform:xwiki-platform-livedata…
- CVE-2026-53957Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpointcontentful-mcp-server · @contentful mcp-server +3
- CVE-2026-54167Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host headertektoncd pipelines-as-code · github.com/openshift-pipelines…
- CVE-2026-57586CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Executionnaranor agent-coderag · agent-coderag
- CVE-2026-89025Hirschmann HiOS Switch Platform DoS via Malformed HTTP RequestBelden Hirschmann HiOS Switch Platform
- CVE-2026-90650MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'jetmonsters MotoPress Hotel Booking
- CVE-2026-16141OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge ValueOpenBMC phosphor-net-ipmid
- CVE-2026-16140OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1OpenBMC phosphor-net-ipmid
- CVE-2026-14805Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAXStylemixThemes Consulting - Business, Finance WordPress The…
- CVE-2026-92076Incorrect boundary conditions in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92074Mitigation bypass in the Popup Blocker componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92073Privilege escalation in the Enterprise Policies componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92072Incorrect boundary conditions in the Safe Browsing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92067Use-after-free in the Widget: Gtk componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92065Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92064Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92062Privilege escalation in the Session Restore componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92060Use-after-free in the Internationalization componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92058Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92056Use-after-free in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92055Privilege escalation in the DevTools componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92054Privilege escalation in the Memory componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92053Privilege escalation in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92052Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92049Use-after-free in the Widget: Win32 componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92047Privilege escalation in the Crash Reporting componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92046Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92044Information disclosure in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92043Privilege escalation due to incorrect boundary conditions in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92042Race condition in the DOM: Content Processes componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92040Use-after-free in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92033Privilege escalation in Firefox for AndroidMozilla Firefox
- CVE-2026-92029Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92028Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92027Use-after-free in the DOM: Streams componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92026Use-after-free in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92025Use-after-free in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92024Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92023Use-after-free in the XML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92022Use-after-free in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92021Use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92020Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92019Mitigation bypass in the Remote Settings Client componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92017Privilege escalation in the DOM: Service Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92016Use-after-free in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92015Privilege escalation in the WebExtensions componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92014Privilege escalation due to incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92013Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92012Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92011Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92010Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92009Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92008Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92007Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92006Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-91996lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpointdromara lamp-cloud
- CVE-2026-91994Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requestssemaphoreui semaphore
- CVE-2026-91925Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Enginepolyaxon
- CVE-2026-91924pgweb through 0.17.0 Missing Authorization on Direct Connect Endpointsosedoff pgweb
- CVE-2026-91923KubeSphere through 4.1.3 SSRF via git credential verification endpointkubesphere
- CVE-2026-1758Session FixationSecomea GateManager
- CVE-2026-52827Kimai: Two-factor authentication bypass on the Kimai APIkimai · kimai/kimai
- CVE-2026-57133PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingMervinPraison PraisonAI · praisonai
- CVE-2026-57135PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsMervinPraison PraisonAI · praisonai
- CVE-2026-57134PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validationMervinPraison PraisonAI · praisonai
- CVE-2026-57136PraisonAI SandboxExecutor allowedCommands bypass via shell chainingMervinPraison PraisonAI · praisonai
- CVE-2026-57137PraisonAI AgentLoop onToolCall approval runs after tool executionMervinPraison PraisonAI · praisonai
- CVE-2026-57112PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsMervinPraison PraisonAI · MervinPraison praisonaiagents +2
- CVE-2026-47426OpenAM OAuth Client Impersonation via JWKS Resolver CacheOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-47424OpenAM Authenticated RCE via Groovy Sandbox EscapeOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-41573OpenAM LDAP Injection via `_queryId` ParameterOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-19515OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command ExecutionWSO2 Integrator: MI for Visual Studio Code
- CVE-2026-46623OpenAM Account Takeover via Unverified Password Change in OAuth2 ModuleOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-46498OpenAM Arbitrary OAuth Token Minting via Push RegistrationOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45794OpenAM Unsafe Java Deserialization via SNSOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45048OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPCOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-44203OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)OpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-53660OpenAM Insecure SSO Cookie InitializationOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-44793OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget`OpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-80217Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode oLITE-ON Technology FF-RFI079I4 · LITE-ON Technology FF-RFI0…
- CVE-2026-77853Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4.LITE-ON Technology FF-RFI079I4 · LITE-ON Technology FF-RFI0…
- CVE-2026-76159Duplicati for Windows - Incorrect Permission Assignment for Critical ResourceDuplicati
- CVE-2026-91846MISP Collection Element Add Missing Authorization on Referenced Object UUIDMISP
- CVE-2026-75092Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable pluginsRed Hat Enterprise Linux · Red Hat OpenStack Platform
- CVE-2026-91825MISP: Missing Authorization Check for Event Sharing Group When Distribution Field Is Omitted During EditMISP
- CVE-2026-91778In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including theOctopus Deploy Octopus Server
- CVE-2026-75983Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filterarraytics Eventin – Event Calendar, Tickets, Registration,…
- CVE-2026-88262Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass.bizwell xClick
- CVE-2026-91771Weights & Biases wandb before 0.29.0 Path Traversal via File Downloadwandb
- CVE-2026-91770IceHRM before 36.0.0 Broken Access Control via Employee IDgamonoid icehrm
- CVE-2026-91752GNU libextractor before 1.15 Stack Overflow via OLE2GNU libextractor
- CVE-2026-91751Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST APIflextype
- CVE-2026-91750WeKnora before 0.7.0 SSRF via Unvalidated HTTP RedirectsTencent WeKnora
- CVE-2025-66974An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial
- CVE-2026-51134The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml
- CVE-2026-52484An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/de
- CVE-2026-79410Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce thei
- CVE-2026-79411Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding o
- CVE-2026-79425An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan i
- CVE-2026-79551Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
- CVE-2026-88616An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTas
- CVE-2026-886191024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module.
Medium, low and unrated 390
- CVE-2026-92184ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgeryag-ui-protocol ag-ui
- CVE-2026-73460Security Advisory 0160Arista Networks EOS
- CVE-2025-11395Podman: arbitrary file write when importing oci archiveRed Hat Enterprise Linux · Red Hat Hardened Images +2
- CVE-2026-92257Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() SinksNetcore NR255-V
- CVE-2026-92255Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API MisuseNetcore NR255-V
- CVE-2026-76873Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname FieldsNetcore NR255-V
- CVE-2026-76872Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management PagesNetcore NR255-V
- CVE-2026-76868Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_portNetcore NR255-V
- CVE-2026-76867Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI HandlersNetcore NR255-V
- CVE-2026-76865Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter HandlersNetcore NR255-V
- CVE-2026-76864Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule NamesNetcore NR255-V
- CVE-2026-76863Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan RoutesNetcore NR255-V
- CVE-2026-76858Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgiNetcore NR255-V
- CVE-2026-82567mySCADA myPRO Manager Missing AuthorizationmySCADA Technologies mySCADA myPRO
- CVE-2026-92259Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directoSamsung Opensource Escargot
- CVE-2026-92114a2ui-project a2ui Basic Catalog safe_regex.ts redosa2ui-project a2ui
- CVE-2026-73444On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim theArista Networks EOS
- CVE-2026-19655On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthentArista Networks EOS
- CVE-2026-92234QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation ErrorsWebkul QloApps
- CVE-2026-91719Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.Google Chrome
- CVE-2026-91730Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-91713Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-91739Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-91725Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted Google Chrome
- CVE-2026-91714Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensGoogle Chrome
- CVE-2026-91742Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering tGoogle Chrome
- CVE-2026-91732Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-91723Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML pGoogle Chrome
- CVE-2026-91746Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted Google Chrome
- CVE-2026-91740Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HGoogle Chrome
- CVE-2026-91708Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtaGoogle Chrome
- CVE-2026-91717Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive informatGoogle Chrome
- CVE-2026-91747Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain Google Chrome
- CVE-2026-91720Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a cGoogle Chrome
- CVE-2026-91744Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the reGoogle Chrome
- CVE-2026-91726Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbGoogle Chrome
- CVE-2026-66372Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-81927Concrete CMS before 9.5.3 is vulnerable to Stored XSS via SVG upload in "Reject" sanitization modeConcrete CMS
- CVE-2026-68953Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VMAX A1 G4 DVR · Digital Watchdog VMAX… +3
- CVE-2026-18426Concrete CMS 9.0.0 to 9.5.2 Express Form block missing authorization allows an authenticated editor to modify Express Forms they cannot editConcrete CMS
- CVE-2026-92237Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier Devolutions PowerShell Universal
- CVE-2026-81926Concrete CMS 9.4.0 through 9.5.2 is vulnerable to Cross-site scripting in the location panel duplicate-path confirmation dialogConcrete CMS
- CVE-2026-81925Concrete CMS below 9.5.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via Conversation Custom Date FormatConcrete CMS
- CVE-2026-87285Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87284Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87283Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87282Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87281Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87280Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87279Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87278Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87275Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87274Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87267Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2026-87253Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client).Oracle Agile PLM
- CVE-2026-87252Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).Oracle Agile PLM
- CVE-2026-87248Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2026-87169Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Wage DeterminatioOracle Contract Lifecycle Management for Public Sector
- CVE-2026-83491Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).Oracle iRecruitment
- CVE-2026-83488Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security).Oracle Helidon
- CVE-2026-83480Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket).Oracle Helidon
- CVE-2026-83460Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA).Oracle Helidon
- CVE-2026-83459Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart).Oracle Helidon
- CVE-2026-83458Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON).Oracle Helidon
- CVE-2026-89027miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication DowngrademiniOrange JWT Authentication for WP REST APIs
- CVE-2026-83443Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations).Oracle Assets
- CVE-2026-83441Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).Oracle Product Hub
- CVE-2026-83433Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics).Oracle Depot Repair
- CVE-2026-83431Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI).Oracle Product Workbench
- CVE-2026-83419Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPOracle Communications Cloud Native Core Security Edge Prote…
- CVE-2026-83416Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83414Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83413Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83369Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Access SDK).Oracle Access Manager
- CVE-2026-83354Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).Oracle Coherence
- CVE-2026-83347Vulnerability in the Oracle Net Services component of Oracle Database Server.Oracle Database Server
- CVE-2026-83346Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework).Oracle Fusion Middleware Control
- CVE-2026-83279Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).Oracle Agile PLM MCAD Connector
- CVE-2026-83278Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-neo4j).Oracle Helidon
- CVE-2026-83274Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).Oracle Agile PLM MCAD Connector
- CVE-2026-76796Newell Brands DYMO Connect Desktop improper file path validationNewell Brands DYMO Connect Desktop
- CVE-2026-83251Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83250Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).Oracle Commerce Guided Search / Oracle Commerce Experience…
- CVE-2026-83200Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle Process Manufacturing Intelligence
- CVE-2026-83198Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83175Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).Oracle Application Object Library
- CVE-2026-83140Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations).Oracle Field Service
- CVE-2026-83109Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83097Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode).Oracle Forms
- CVE-2026-83077Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).Oracle Siebel CRM Cloud Applications
- CVE-2026-83076Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations).Oracle HR Intelligence
- CVE-2026-73965Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway).Oracle Siebel CRM Deployment
- CVE-2026-70755Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download).Oracle Web Applications Desktop Integrator
- CVE-2026-62597Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management).Oracle Enterprise Manager Base Platform
- CVE-2026-18425IDOR in Concrete CMS 9.0.0 through 9.5.2 dashboard sitemap reorder (SitemapUpdate::updateDisplayOrder) allows an authenticated sitemap user to reorder arbitrary pagesConcrete CMS
- CVE-2026-18424Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different portsConcrete CMS
- CVE-2026-32599Netmaker has a boolean‑based SQL Injectiongravitl netmaker · github.com/gravitl/netmaker
- CVE-2026-88922Go-getter vulnerable to a privilege escalation issue in its archive decompression handlingHashiCorp Shared library
- CVE-2026-18423Concrete CMS 9.0.0 through 9.5.2 is vulnerable to Insecure direct object reference (IDOR) in the Express saved search preset delete and edit dialogs allowing an authenticated user with permission on one Express entity to delete or rename saved search presConcrete CMS
- CVE-2026-69206Http4s: DigestAuth allows replay of captured requestshttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-18422Concrete CMS below 9.5.3 Multilingual Page Assign Action Lacks Destination Authorization and CSRF Token ValidationConcrete CMS
- CVE-2026-76707Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76706Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive dataHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76705Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76704Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management InterfaceHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76703Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-ServiceHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76702Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76701Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76700Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76699Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76698Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76697Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management InterfaceHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76696Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76695Unauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-76694Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN GatewaysHewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- CVE-2026-69215Http4s: CookieJar middleware matches by substring, leaking cookies cross-originhttp4s · org.http4s:http4s-client_2.12 +2
- CVE-2026-84850Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 aDevolutions Server
- CVE-2026-18421Concrete CMS 9.0.0-9.5.2 Boards data source dashboard is missing an authorization check, allowing a low-privileged board editor to modify or delete configured data sources on boards they do not controlConcrete CMS
- CVE-2026-69212Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirecthttp4s
- CVE-2026-90969Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authenticated user lacking Devolutions Server
- CVE-2026-68529Concrete CMS 9.0.0 through 9.5.2 us missing authorization in the Express entries advanced-search dashboard action allowing a low-privileged user to read other entities' Express entriesConcrete CMS
- CVE-2026-84048Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2joomgalleryfriends.net JoomGallery extension for Joomla
- CVE-2026-90971Server-Side Request Forgery (SSRF) in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privilegedDevolutions Server
- CVE-2026-68530Concrete CMS 9.0.0 through 9.5.2 is Missing Authorization on Board Instance Actions Allowed a Board Editor to Access and Delete Other Boards' InstancesConcrete CMS
- CVE-2026-69214Http4s: CookieJar middleware accepts arbitrary Set-Cookie domainhttp4s · org.http4s:http4s-client_2.12 +2
- CVE-2026-68531Concrete CMS below 9.5.3 is vulnerable to Authenticated Denial of Service via Unescaped SQL LIKE Wildcards in Keyword SearchConcrete CMS
- CVE-2026-69201Http4s: ResourceService and Webjar Service path escape via percent-encoded separatorshttp4s · org.http4s:http4s-server_2.12 +2
- CVE-2026-69216Http4s: Ember chunk parser lenience (TE.TE request smuggling)http4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69211Http4s: Set-Cookie rendering does not escape attribute delimitershttp4s
- CVE-2026-81924Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Theme Page Template ActivationConcrete CMS
- CVE-2026-82190Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com J2Store extension for Joomla
- CVE-2026-81923Concrete CMS below 9.5.3 is missing authorization in the SEO Bulk Update Meta Tags editorConcrete CMS
- CVE-2026-81922"In Concrete CMS below 9.5.3, there is Missing authorization in the sitemap page reorder allowing low-privilege users to reorder arbitrary pages "Concrete CMS
- CVE-2026-82191Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com J2Store extension for Joomla
- CVE-2026-81921In Concrete CMS 8.5.3 to 9,5,2, OAuth 2.0 Refresh-Token Grant Bypasses Account StatusConcrete CMS
- CVE-2026-81920Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Dashboard SEO Excluded Words Reset EndpointConcrete CMS
- CVE-2026-73467On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) serversArista Networks EOS
- CVE-2026-68532Concrete CMS 9.0.0 to 9.5.2 is vunerable to CSRF in Concrete CMS Group Type Deletion Dashboard ActionConcrete CMS
- CVE-2026-73466On affected platforms running Arista EOS, under certain circumstances plaintext user passwordsArista Networks EOS
- CVE-2026-73465On affected platforms running Arista EOS, under certain circumstances plaintext private keysArista Networks EOS
- CVE-2026-58773In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58767In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-58765In GPU, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58755In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-58751In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-58747In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58739In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy.Google Android
- CVE-2026-58731In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data.Google Android
- CVE-2026-58726In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58721In multiple locations, there is a possible information disclosure due to uninitialized memory use.Google Android
- CVE-2026-58718In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation.Google Android
- CVE-2026-58716In multiple locations, there is a possible time-of-check to time-of-use due to a race condition.Google Android
- CVE-2026-58698In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-57042In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-57035In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-57006In acfw_ffa.c, there is a possible secret read due to a logic error in the code.Google Android
- CVE-2026-56992In multiple files, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-56989In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-56988In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-56979In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-56975In Cellular Modem, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-56973In multiple locations, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-56972In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-56964In multiple locations, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-56958In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-56950In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation.Google Android
- CVE-2026-56932In Trusted Execution Environment, there is a possible memory corruption due to improper input validation.Google Android
- CVE-2026-56923In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition.Google Android
- CVE-2026-56922In CPM, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-56915In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition.Google Android
- CVE-2026-56907In VPU, there is a possible shared memory overwrite due to improper input validation.Google Android
- CVE-2026-56892In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check.Google Android
- CVE-2026-56889In multiple locations, there is a possible permission bypass due to an integer overflow.Google Android
- CVE-2026-56888In multiple locations, there is a possible permission bypass due to side channel information disclosure.Google Android
- CVE-2026-56879In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy.Google Android
- CVE-2026-55365In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-55332In multiple locations, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-55317In printf of printf.c, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-55304In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-55302In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-0197In VPU, there is a possible information dislclosure due to a logic error in the code.Google Android
- CVE-2026-0192In Bootloader, there is a possible escalation of privilege due to a missing permission check.Google Android
- CVE-2026-0187In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-0186In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2026-0183In CPM, there is a possible information disclosure due to a confused deputy.Google Android
- CVE-2026-0179In Bootloader, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-0177In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-68533Missing Authorization in Concrete CMS versions below 9.5.3 Conversation File Upload Allows File Import Without the Add Message Attachments PermissionConcrete CMS
- CVE-2026-68534Concrete CMS below 9.5.2 is vulnerable to Stored XSS via unescaped Express entry labels in association selectorsConcrete CMS
- CVE-2026-81919Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Block Arrangement EndpointConcrete CMS
- CVE-2026-19641On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources, resulting in legitArista Networks EOS
- CVE-2026-73451On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, canArista Networks EOS
- CVE-2026-19504Fabric.js loadFromJSON Server-Side Request Forgery VulnerabilityFabric.js
- CVE-2026-57442MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nestedbitbonsai mcpvault · @bitbonsai/mcpvault
- CVE-2026-81237Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability.Dell Wyse Management Suite
- CVE-2026-54688mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)ihor-sokoliuk mcp-searxng · mcp-searxng
- CVE-2026-54689mcp-searxng hardened-mode SSRF bypasses permit internal URL accessihor-sokoliuk mcp-searxng · mcp-searxng
- CVE-2026-56830Shopper: Incomplete fix for GHSA-h4mp-g9c6-xwph: Media sub-form store() still lacks authorizationshopperlabs shopper · shopper/framework
- CVE-2026-56831Shopper: Negative discount values accepted and propagated through order calculation pipelineshopperlabs shopper · shopper/framework
- CVE-2026-12910Missing Authentication for Critical Function in GitLabGitLab
- CVE-2026-82837Insertion of Sensitive Information Into Sent Data in GitLabGitLab
- CVE-2026-55374canto-saas-api: Authenticated API requests can be redirected via unencoded path variablesjleehr canto-saas-api · jleehr/canto-saas-api
- CVE-2026-55375canto-saas-api: OAuth credentials exposed in URL query string and exception messagesjleehr canto-saas-api · jleehr/canto-saas-api
- CVE-2026-11864Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.IBM Cloud Pak for Business Automation
- CVE-2026-11918IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structuresIBM ContextForge MCP Gateway
- CVE-2026-11927Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access · IBM Security Verify Access
- CVE-2026-53954Bugsink: DOS using large numbers of event tagsbugsink
- CVE-2026-48785Apptainer: Incorrect path matching for 'limit container paths' directiveapptainer · github.com/apptainer/apptainer
- CVE-2026-55226Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operatorstrimzi-kafka-operator · io.strimzi:strimzi
- CVE-2026-54050Sakai: IDOR in Profile Image Deletion Allows Any Authenticated User to Delete Any User's Profile Imagesakaiproject sakai · org.sakaiproject.profile2:profile2-… +1
- CVE-2026-12742Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026IBM Business Automation Workflow containers and traditional
- CVE-2026-12749Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.IBM Cloud Pak for Business Automation
- CVE-2026-12750Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.IBM Cloud Pak for Business Automation
- CVE-2026-12751Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.IBM Cloud Pak for Business Automation
- CVE-2026-53941Inspektor Gadget Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoSinspektor-gadget · github.com/inspektor-gadget/inspektor-ga…
- CVE-2026-44778Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELFinspektor-gadget · github.com/inspektor-gadget/inspektor-ga…
- CVE-2026-55863motionEye: Missing authentication on ActionHandler allows unauthenticated camera action executionmotioneye-project motioneye · motioneye
- CVE-2026-91855Open5GS PFCP Message handler.c denial of serviceOpen5GS
- CVE-2026-54503plone.app.textfield: Stored XSS by spoofing mime typeplone.app.textfield · plone-app-textfield
- CVE-2026-53658Fabric CA: LDAP Injection via Unescaped Username in GetUser Filterhyperledger fabric-ca · github.com/hyperledger/fabric-ca
- CVE-2026-54561MCP Memory Keeper: Arbitrary local file read in mcp-memory-keeper context_import via unvalidated filePathmkreyman mcp-memory-keeper · mcp-memory-keeper
- CVE-2026-91854code-projects Record Management System reg.php cross site scriptingcode-projects Record Management System
- CVE-2026-79699Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directoryRed Hat Ansible Automation Platform · Red Hat Enterprise… +5
- CVE-2026-79705Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callersRed Hat Hardened Images · Red Hat Ansible Automation Pla… +5
- CVE-2026-91853TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injectionTOTOLINK X5000R
- CVE-2026-58196ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)stacklok toolhive · github.com/stacklok/toolhive
- CVE-2026-54450ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gatewaystacklok toolhive · github.com/stacklok/toolhive
- CVE-2026-59157webhookd: Unrestricted HTTP Header to Shell Variable Injectionncarlier webhookd · github.com/ncarlier/webhookd
- CVE-2026-55770OpenBao: LDAPi ldaputil (wrong escape func)openbao · github.com/openbao/openbao
- CVE-2026-55776OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key typesopenbao · github.com/openbao/openbao
- CVE-2026-55774OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808openbao · github.com/openbao/openbao
- CVE-2026-55775OpenBao's System Backend allows Unauthorized Management of the containing Namespaceopenbao · github.com/openbao/openbao
- CVE-2026-44163fluent-plugin-opentelemetry: Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`fluent-plugins-nursery fluent-plugin-opentelemetry · fluent…
- CVE-2026-55591Signal K Server: Server-Side Request Forgery via Remote Connection Endpointssignalk-server
- CVE-2026-55630Kiwi TCMS: Stored XSS via javascript: URI in extra_link field (TestPlan & TestCase)kiwitcms Kiwi · kiwitcms
- CVE-2026-54724Kiwi TCMS: Open Redirect via unvalidated next parameter in account confirmation endpointkiwitcms Kiwi · kiwitcms
- CVE-2026-91849WuzhiCMS Avatar Upload index.php setAvatar unrestricted uploadWuzhiCMS
- CVE-2026-55636Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotectedprojectcapsule capsule · github.com/projectcapsule/capsule
- CVE-2026-44282Election question titles allow stored script executiondecidim · decidim-elections
- CVE-2026-89307HTML injection allows open redirection in WordPress theme design-scuole-wordpress-themeDevelopers Italia design-scuole-wordpress-theme
- CVE-2026-87793Reflected XSS in WordPress theme design-scuole-wordpress-themeDevelopers Italia design-scuole-wordpress-theme
- CVE-2026-91991Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargstornadoweb tornado · tornado
- CVE-2026-91986gitoxide gix-transport before 0.59.2 CR/LF/NUL InjectionGitoxideLabs gitoxide
- CVE-2026-91984Vikunja before 2.6.0 Broken Object-Level Authorization via task-positiongo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91983Vikunja before 2.6.0 API Token Scope Bypass via expand Parametergo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91982Vikunja before 2.6.0 TOTP Secret Disclosure via APIgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91981Vikunja before 2.6.0 User Enumeration via v2 APIgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91980vikunja before 2.6.0 Team Enumeration via Project Sharego-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91979Vikunja before 2.6.0 Denial of Service via Decompression Bombgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91970Vikunja before 2.6.0 Resource Exhaustion via Planka Migrationgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91969vikunja before 2.6.0 Resource Exhaustion via CSV Migrationgo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91968vikunja before 2.6.0 Denial of Service via unbounded filter recursiongo-vikunja vikunja · code.vikunja.io/api
- CVE-2026-91967AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURLWWBN AVideo
- CVE-2026-91966AVideo through 29.0 Unauthenticated SSRF via Host HeaderWWBN AVideo
- CVE-2026-91962FreeRDP before 3.31.0 Integer Overflow via audin Apple backendsFreeRDP
- CVE-2026-91960FreeRDP before 3.31.0 Integer Overflow Double FreeFreeRDP
- CVE-2026-91959FreeRDP before 3.31.0 Buffer Over-read via RTS GatewayFreeRDP
- CVE-2026-91958FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor IndexFreeRDP
- CVE-2026-91957FreeRDP before 3.31.0 Use-After-Free via smartcard workerFreeRDP
- CVE-2026-91944crawl4ai before 0.9.3 DOM-based XSS via Playground UIunclecode crawl4ai
- CVE-2026-91942crawl4ai before 0.9.3 Cross-Site Scripting via innerHTMLunclecode crawl4ai
- CVE-2026-91936Flowise before 3.1.4 Script Injection via Docker WorkflowsFlowiseAI Flowise
- CVE-2024-58384Tornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClienttornadoweb tornado · tornado
- CVE-2026-91848WuzhiCMS index.php getDataOfJson sql injectionWuzhiCMS
- CVE-2026-55828qbee transport: Symlink-chain path traversal in tar extraction (one level outside destination)qbee-io transport · go.qbee.io/transport
- CVE-2026-47215Singularity: Incorrect path matching for 'limit container paths' directivesylabs singularity · sylabs SingularityPRO +2
- CVE-2026-55701OpenTelemetry githubreceiver silently ignores configured required_headers authenticationopen-telemetry opentelemetry-collector-contrib · github.com…
- CVE-2026-50024GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git serverWangYihang GitHacker · githacker
- CVE-2026-91842OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserializationOpenBankProject OBP-API
- CVE-2026-50166Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configuredkumahq kuma · github.com/kumahq/kuma +1
- CVE-2026-52724kuma-dp connects to control plane without verifying TLS certificate when no CA is configuredkumahq kuma · github.com/kumahq/kuma/v2 +1
- CVE-2026-55617Hydro: Insufficient session expiration when recreating sessionshydro-dev Hydro · hydrooj
- CVE-2026-91836OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factorsOpenClaw ClawScan
- CVE-2026-47780free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistencefree5gc · github.com/free5gc/udr
- CVE-2026-48987pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManagerpyload · pyload-ng
- CVE-2026-48737pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPspyload · pyload-ng
- CVE-2026-55650Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposureouterbase studio · @outerbase/studio
- CVE-2026-54254Cyberdrop-DL: Pixeldrain API key shared with unverified thirdparty sitescyberdrop-dl · cyberdrop-dl-patched
- CVE-2026-49446Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Serverazukaar Cosmos-Server · github.com/azukaar/cosmos-server
- CVE-2026-54168Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolutiontektoncd pipelines-as-code · github.com/openshift-pipelines…
- CVE-2026-90439NGINX ngx_http_v3_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-91835OpenClaw ClawScan File Classifier static_scanner.go IsBinaryFile interpretation conflictOpenClaw ClawScan
- CVE-2026-48722Nextflow: Incorrect default permissions in the nextflow auth login commandnextflow-io nextflow · io.nextflow:nextflow
- CVE-2026-49254Dragonfly Manager OAuth provider client_secret disclosure via unauthenticated GET /api/v1/oauthdragonflyoss dragonfly · d7y.io/dragonfly/v2
- CVE-2026-54637Dragonfly scheduler v1 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFiledragonflyoss dragonfly · d7y.io/dragonfly/v2
- CVE-2026-92082Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attemptsPayara Server
- CVE-2026-15609Bridge - Creative Multipurpose WordPress Theme <= 30.8.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'circle_line' Shortcode AttributeQODE Bridge - Creative Multipurpose WordPress Theme
- CVE-2026-92078Denial-of-service in the Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92077Denial-of-service in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92070Information disclosure in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92069Spoofing issue in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92068Site isolation issue in the Reader Mode componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92063Denial-of-service in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92039Mitigation bypass in the DOM: Notifications componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92031Information disclosure in the Graphics: ImageLib componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92030Mitigation bypass in the DOM: Copy & Paste and Drag & Drop componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-92005Use-after-free in the Audio/Video: Web Codecs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-91926Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challengeRed Hat Enterprise Linux
- CVE-2026-92003MISP Unthrottled Authentication Failure Log Writes Enable Resource ExhaustionMISP
- CVE-2026-91997evolution-api through 2.3.7 Prometheus Metrics IP Allowlist Bypassevolution-foundation evolution-api
- CVE-2026-91993Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-listdromara Jpom
- CVE-2026-92002MISP: Authentication failure logging suppressed during Redis unavailabilityMISP
- CVE-2026-91786Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer sizeRed Hat Enterprise Linux
- CVE-2026-91922Steedos Platform through 3.0.15-beta.47 Reflected XSS via page rendersteedos-platform
- CVE-2026-1759Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation.Secomea GateManager
- CVE-2026-80489EUC_JISX0213 decoding may hang on crafted inputThe GNU C Library glibc
- CVE-2026-77117SHIFT_JISX0213 decoding may hang on crafted inputThe GNU C Library glibc
- CVE-2026-52822Kimai: Improper Authorization in Kimai Timesheet Restart and Duplicate Allows New Timesheets After Project Access Revocationkimai · kimai/kimai
- CVE-2026-52828Kimai: ExportTemplate CRUD Missing Authorization Check Allows Unauthorized TEAMLEAD Accesskimai · kimai/kimai
- CVE-2026-52826Kimai: Improper Authorization in Kimai Project, Customer, and Activity Rate Edit Endpoints Allows Cross-Scope Rate Manipulationkimai · kimai/kimai
- CVE-2026-52823Kimai: Login CSRF in Kimai Timesheet Stop and Restart API Endpoints Allows Unauthorized State Changeskimai · kimai/kimai
- CVE-2026-86818fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronizationfast-uri
- CVE-2026-52825Kimai: Improper Authorization in Kimai Team Member and Team Activity Assignment APIs Allows Expansion of Team Scope Beyond Authorized Visibilitykimai · kimai/kimai
- CVE-2026-52821Kimai: Improper Authorization in Kimai Activity Creation with Preset Project Allows Creation Under Unauthorized Projectskimai · kimai/kimai
- CVE-2026-52820Kimai: Timesheet PATCH/POST allows assigning to project outside user's team via query_builder OR-bypasskimai · kimai/kimai
- CVE-2026-52819Kimai: Teamlead authorization bypass in GET /api/timesheets allows reading other users' timesheet records without being teamlead of the targetkimai · kimai/kimai
- CVE-2026-86472fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsfast-uri
- CVE-2026-62280OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent pageOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2025-13166Username Enumeration via SMS OTP Flow in WSO2 Identity Server Allows User Account DiscoveryWSO2 Identity Server
- CVE-2025-5802Username Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account DiscoveryWSO2 API Manager · WSO2 API Control Plane +7
- CVE-2026-44202OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`OpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-91859MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter PassMISP
- CVE-2026-59341Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpointsBitnami sealed-secrets
- CVE-2026-91857MISP: State-changing actions accessible via GET request enabling CSRFMISP
- CVE-2026-91782GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereferenceGNU Binutils
- CVE-2026-91851MISP Dashboard Template ACL Bypass Due to VARCHAR-to-Integer Type Coercion in Permission Flag ComparisonMISP
- CVE-2026-91826Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption wSamsung Opensource rLottie
- CVE-2026-91781GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereferenceGNU Binutils
- CVE-2026-91780GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereferenceGNU Binutils
- CVE-2026-91779GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereferenceGNU Binutils
- CVE-2026-91091GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruptionGPAC
- CVE-2026-91819MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponentMISP
- CVE-2026-91090GPAC base_scenegraph.c gf_node_activate_ex stack-based overflowGPAC
- CVE-2026-91089GPAC base_scenegraph.c gf_node_get_name_and_id use after freeGPAC
- CVE-2026-18063Job Postings <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position_button' Parameterblueglassch Job Postings
- CVE-2026-91088GPAC URL url.c gf_url_concatenate_ex heap-based overflowGPAC
- CVE-2026-91087GPAC Compositor media_object.c gf_mo_get_od_id use after freeGPAC
- CVE-2026-91086GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflowGPAC
- CVE-2026-91005SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted uploadSourceCodester Online Faculty Clearance System
- CVE-2026-15402Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameterarraytics Eventin – Event Calendar, Tickets, Registration,…
- CVE-2026-89141AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parametertigroumeow AI Engine – The Chatbot, AI Framework & MCP for…
- CVE-2026-91004SourceCodester Online Faculty Clearance System delete_faculty1.php sql injectionSourceCodester Online Faculty Clearance System
- CVE-2026-18232WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindowWP Directory Kit
- CVE-2026-16592WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via ShortcodesWP Directory Kit
- CVE-2026-16593WP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget SettingsWP Directory Kit
- CVE-2026-86701Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components.NTT DOCOMO BUSINESS ManabiPocket for Parents
- CVE-2026-17495moment vulnerable to Path Traversal via crafted non-string locale namemoment
- CVE-2026-81320Hawtio-operator: hawtio-operator: tls private key written to operator log at debug levelRed Hat build of Apache Camel - HawtIO
- CVE-2026-81303Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostnameRed Hat build of Apache Camel - HawtIO
- CVE-2026-91002stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authenticationstamparm maltrail
- CVE-2026-157583D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameteriberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer…
- CVE-2026-90881D-Link DIR-882 CGI Binary dllog.cgi main information disclosureD-Link DIR-882
- CVE-2026-90880D-Link DSL-3782 Diagnostics Diagnostics.asp system command injectionD-Link DSL-3782
- CVE-2026-90879zyx0814 FilePress Publish search.php sql injectionzyx0814 FilePress
- CVE-2026-90878vllm-project vLLM Jinja Template Rendering completions resource consumptionvllm-project vLLM
- CVE-2026-90877SourceCodester Online Faculty Clearance System update_requirement_status.php sql injectionSourceCodester Online Faculty Clearance System
- CVE-2026-90876SourceCodester Online Faculty Clearance System delete_requirement.php sql injectionSourceCodester Online Faculty Clearance System
- CVE-2026-90858subhajitkhan online-clinic-management-system adminappview.php session_start authorizationsubhajitkhan online-clinic-management-system
- CVE-2026-90857SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted uploadSourceCodester College Notes Gallery Management System
- CVE-2026-90856SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges managementSourceCodester College Notes Gallery Management System
- CVE-2026-90855SourceCodester/katojkalemba Online Food Ordering System order.php sql injectionSourceCodester Online Food Ordering System · katojkalemba O…
- CVE-2026-90854SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injectionSourceCodester Online Food Ordering System · katojkalemba O…
- CVE-2026-90852luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after freeluben zstd-jni
- CVE-2026-88261Improper input validation vulnerability in bizwell xClick allows Stored XSS.bizwell xClick
- CVE-2026-90851PHPGurukul Hostel Management System checklogin.php access controlPHPGurukul Hostel Management System
- CVE-2026-90850PHPGurukul Hostel Management System manage-students.php cross site scriptingPHPGurukul Hostel Management System
- CVE-2026-90849SourceCodester College Notes Gallery Management System login.php sql injectionSourceCodester College Notes Gallery Management System
- CVE-2026-91774Yao through v1.0.0-rc22 Missing Authorization via OpenAPI team endpointYaoApp yao
- CVE-2026-91773Soft Serve 0.7.1 through 0.11.6 Information Disclosure via LFS Lockscharmbracelet soft-serve
- CVE-2026-91772Halo through 2.26.1 Open Redirect via Unvalidated URI Parameterhalo-dev halo
- CVE-2026-90848Governikus AusweisApp StartPAOSResponse cross site scriptingGovernikus AusweisApp
- CVE-2026-85657Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'profile_fields_user_email_value_prefix' ParameterCo-Authors, Multiple Authors and Guest Authors in an Author…
- CVE-2026-85575The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameterroxnor ShopEngine Elementor WooCommerce Builder Addon – All…
- CVE-2026-90846PHPGurukul Daily Expense Tracker System forgot-password.php sql injectionPHPGurukul Daily Expense Tracker System
- CVE-2026-90845PHPGurukul Daily Expense Tracker System sidebar.php cross site scriptingPHPGurukul Daily Expense Tracker System
- CVE-2026-90844PHPGurukul Daily Expense Tracker System Login index.php sql injectionPHPGurukul Daily Expense Tracker System
- CVE-2026-90843SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injectionSabyasachiRana WebMap
- CVE-2026-25825An issue was discovered in Keyfactor SignServer before 7.6.0.
- CVE-2026-25826An issue was discovered in Keyfactor SignServer before 7.6.0.
- CVE-2026-25827An issue was discovered in Keyfactor SignServer before 7.6.0.
- CVE-2026-39038BharatMLStack up to and including v1.3.0 is vulnerable to Cross Site Scripting (XSS) in the component Trufflebox UI (trufflebox-ui) in Gener
- CVE-2026-39039In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the brow
- CVE-2026-39040BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Scripting (XSS) via the component Trufflebox UI (trufflebox-ui) in Expre
- CVE-2026-51133Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary cod
- CVE-2026-79409An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and the downloadable fulfi
- CVE-2026-886181024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality.
- CVE-2026-88620SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint.
- CVE-2026-88621OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload() method in class/Api.php.
- CVE-2026-88742Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field.
- CVE-2026-88743Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.