# CVEs published 2026-10-20 1,923 CVEs were published on October 20, 2026: 173 critical, 803 high. Days are UTC. - [CVE-2026-113735](https://cve.now/CVE-2026-113735.md): D-Link DCS-6501LH aoni\_ipc mydlink\_set\_root\_pwd weak credentials (CVSS 6.3, D-Link DCS-6501LH) - [CVE-2026-113707](https://cve.now/CVE-2026-113707.md): a2aproject a2a-rs inmemory.rs update race condition (CVSS 5.3, a2aproject a2a-rs) - [CVE-2026-113706](https://cve.now/CVE-2026-113706.md): a2aproject a2a-rs inmemory.rs information disclosure (CVSS 5.1, a2aproject a2a-rs) - [CVE-2026-109682](https://cve.now/CVE-2026-109682.md): Metasploit Framework HTTP Redirect Server-Side Request Forgery (CVSS 4.7, Rapid7 Metasploit Framework) - [CVE-2026-109681](https://cve.now/CVE-2026-109681.md): Metasploit Framework FTP PASV Response SSRF (CVSS 4.7, Rapid7 Metasploit Framework) - [CVE-2026-113705](https://cve.now/CVE-2026-113705.md): a2aproject a2a-rs error.rs information exposure (CVSS 6.9, a2aproject a2a-rs) - [CVE-2026-112202](https://cve.now/CVE-2026-112202.md): Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images (CVSS 6.5, Imager-File-GIF · Imager) - [CVE-2026-76587](https://cve.now/CVE-2026-76587.md): IBM Planning Analytics Buffer Overflow (CVSS 8.8, IBM Planning Analytics) - [CVE-2026-113726](https://cve.now/CVE-2026-113726.md): virtualenv activate runs commands from the environment name in zsh with PROMPT\_SUBST (CVSS 7.8, pypa virtualenv · virtualenv) - [CVE-2026-113776](https://cve.now/CVE-2026-113776.md): virtualenv activation scripts run code from a path that contains a placeholder name (CVSS 7.8, pypa virtualenv · virtualenv) - [CVE-2026-9825](https://cve.now/CVE-2026-9825.md): IBM Cyber Fraud Reachable Assertion (CVSS 3.7, IBM CyberFraud) - [CVE-2026-113732](https://cve.now/CVE-2026-113732.md): virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote (CVSS 7.8, pypa virtualenv · virtualenv) - [CVE-2026-113704](https://cve.now/CVE-2026-113704.md): a2aproject a2a-rs Push Notification push\_notification\_sender.rs HttpPushSender server-side request forgery (CVSS 6.9, a2aproject a2a-rs) - [CVE-2026-81212](https://cve.now/CVE-2026-81212.md): DataStage on Cloud Pak for Data Improper Authorization (CVSS 10.0, IBM DataStage on Cloud Pak for Data) - [CVE-2026-82891](https://cve.now/CVE-2026-82891.md): IBM Guardium Data Protection is affected by a security vulnerability (CVSS 8.1, IBM Guardium Data Protection) - [CVE-2026-87800](https://cve.now/CVE-2026-87800.md): IBM Cyber Fraud includes components with multiple known vulnerabilities (CVSS 6.8, IBM Cyber Fraud) - [CVE-2026-92559](https://cve.now/CVE-2026-92559.md): IBM App Connect Enterprise is vulnerable to a credential exposure (CVSS 9.8, IBM App Connect Enterprise) - [CVE-2026-93441](https://cve.now/CVE-2026-93441.md): IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service (CVSS 8.6, IBM QRadar Security Information and Event Management) - [CVE-2026-93442](https://cve.now/CVE-2026-93442.md): IBM QRadar SIEM Out-of-bounds Read (CVSS 8.2, IBM QRadar) - [PYSEC-2026-4320](https://cve.now/PYSEC-2026-4320.md): certifi bundles emSign root CAs with compromised intermediate CA keys (no CVSS, certifi) - [CVE-2026-93744](https://cve.now/CVE-2026-93744.md): IBM i Improper Authentication (CVSS 6.5, IBM i) - [CVE-2026-93888](https://cve.now/CVE-2026-93888.md): IBM Sterling Connect:Direct for Unix Buffer Overflow (CVSS 7.8, IBM Sterling Connect Direct for Unix) - [CVE-2026-94402](https://cve.now/CVE-2026-94402.md): IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation (CVSS 6.1, IBM @carbon/charts · IBM @carbon/charts-react +3) - [CVE-2026-113731](https://cve.now/CVE-2026-113731.md): djust: Arbitrary absolute-path file read in the find\_handlers\_for\_template MCP tool (CVSS 3.3, djust-org djust · djust) - [CVE-2026-85783](https://cve.now/CVE-2026-85783.md): Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar… (CVSS 7.5, Crypt-Age) - [CVE-2026-91668](https://cve.now/CVE-2026-91668.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). (CVSS 8.8, Oracle Data Integrator) - [CVE-2026-91665](https://cve.now/CVE-2026-91665.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 9.8, Oracle Essbase) - [CVE-2026-91664](https://cve.now/CVE-2026-91664.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 7.5, Oracle Essbase) - [CVE-2026-91663](https://cve.now/CVE-2026-91663.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 9.9, Oracle Essbase) - [CVE-2026-91662](https://cve.now/CVE-2026-91662.md): Vulnerability in Oracle Essbase (component: Java Based Agent). (CVSS 6.4, Oracle Essbase) - [CVE-2026-91661](https://cve.now/CVE-2026-91661.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 7.7, Oracle Essbase) - [CVE-2026-91660](https://cve.now/CVE-2026-91660.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 4.3, Oracle Essbase) - [CVE-2026-91659](https://cve.now/CVE-2026-91659.md): Vulnerability in Oracle Essbase (component: Build). (CVSS 7.7, Oracle Essbase) - [CVE-2026-91658](https://cve.now/CVE-2026-91658.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 9.9, Oracle Essbase) - [CVE-2026-91657](https://cve.now/CVE-2026-91657.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 4.3, Oracle Essbase) - [CVE-2026-91656](https://cve.now/CVE-2026-91656.md): Vulnerability in Oracle Essbase (component: Federated Partitions). (CVSS 9.1, Oracle Essbase) - [CVE-2026-91655](https://cve.now/CVE-2026-91655.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 9.1, Oracle Essbase) - [CVE-2026-91654](https://cve.now/CVE-2026-91654.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 6.3, Oracle Essbase) - [CVE-2026-91653](https://cve.now/CVE-2026-91653.md): Vulnerability in Oracle Essbase (component: Essbase Web Platform). (CVSS 8.5, Oracle Essbase) - [CVE-2026-91652](https://cve.now/CVE-2026-91652.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 5.0, Oracle Essbase) - [CVE-2026-91651](https://cve.now/CVE-2026-91651.md): Vulnerability in Oracle Essbase (component: Essbase Web Platform). (CVSS 8.5, Oracle Essbase) - [CVE-2026-91650](https://cve.now/CVE-2026-91650.md): Vulnerability in Oracle Essbase (component: Java Based Agent). (CVSS 3.7, Oracle Essbase) - [CVE-2026-91649](https://cve.now/CVE-2026-91649.md): Vulnerability in Oracle Essbase (component: Java Based Agent). (CVSS 6.0, Oracle Essbase) - [CVE-2026-91648](https://cve.now/CVE-2026-91648.md): Vulnerability in Oracle Essbase (component: Java Based Agent). (CVSS 5.3, Oracle Essbase) - [CVE-2026-91647](https://cve.now/CVE-2026-91647.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 8.1, Oracle Essbase) - [CVE-2026-91646](https://cve.now/CVE-2026-91646.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 5.6, Oracle Essbase) - [CVE-2026-91645](https://cve.now/CVE-2026-91645.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 5.3, Oracle Essbase) - [CVE-2026-91644](https://cve.now/CVE-2026-91644.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 9.3, Oracle Essbase) - [CVE-2026-91643](https://cve.now/CVE-2026-91643.md): Vulnerability in Oracle Essbase (component: Java Based Agent). (CVSS 5.3, Oracle Essbase) - [CVE-2026-91642](https://cve.now/CVE-2026-91642.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 7.3, Oracle Essbase) - [CVE-2026-91641](https://cve.now/CVE-2026-91641.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 5.0, Oracle Essbase) - [CVE-2026-91640](https://cve.now/CVE-2026-91640.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 5.0, Oracle Essbase) - [CVE-2026-91639](https://cve.now/CVE-2026-91639.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 7.7, Oracle Essbase) - [CVE-2026-91638](https://cve.now/CVE-2026-91638.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 9.9, Oracle Essbase) - [CVE-2026-91637](https://cve.now/CVE-2026-91637.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 9.9, Oracle Essbase) - [CVE-2026-91636](https://cve.now/CVE-2026-91636.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 7.7, Oracle Essbase) - [CVE-2026-91635](https://cve.now/CVE-2026-91635.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 8.1, Oracle Essbase) - [CVE-2026-91634](https://cve.now/CVE-2026-91634.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 5.3, Oracle Essbase) - [CVE-2026-91633](https://cve.now/CVE-2026-91633.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 6.0, Oracle Essbase) - [CVE-2026-91632](https://cve.now/CVE-2026-91632.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 7.7, Oracle Essbase) - [CVE-2026-91631](https://cve.now/CVE-2026-91631.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 5.0, Oracle Essbase) - [CVE-2026-91630](https://cve.now/CVE-2026-91630.md): Vulnerability in Oracle Essbase (component: Security). (CVSS 6.8, Oracle Essbase) - [CVE-2026-91629](https://cve.now/CVE-2026-91629.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). (CVSS 4.7, Oracle Communications Billing and Revenue Management) - [CVE-2026-91628](https://cve.now/CVE-2026-91628.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). (CVSS 5.5, Oracle Communications Billing and Revenue Management) - [CVE-2026-91627](https://cve.now/CVE-2026-91627.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). (CVSS 7.8, Oracle Communications Billing and Revenue Management) - [CVE-2026-91625](https://cve.now/CVE-2026-91625.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.2, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91624](https://cve.now/CVE-2026-91624.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 9.1, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91623](https://cve.now/CVE-2026-91623.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 7.4, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91622](https://cve.now/CVE-2026-91622.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 9.3, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91617](https://cve.now/CVE-2026-91617.md): Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). (CVSS 5.5, Oracle Middleware Common Libraries and Tools) - [CVE-2026-91616](https://cve.now/CVE-2026-91616.md): Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). (CVSS 3.7, Oracle Middleware Common Libraries and Tools) - [CVE-2026-91615](https://cve.now/CVE-2026-91615.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 6.3, Oracle Database Server) - [CVE-2026-91614](https://cve.now/CVE-2026-91614.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). (CVSS 3.3, Oracle Communications Unified Inventory Management) - [CVE-2026-91613](https://cve.now/CVE-2026-91613.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). (CVSS 3.3, Oracle Communications Unified Inventory Management) - [CVE-2026-91612](https://cve.now/CVE-2026-91612.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). (CVSS 3.3, Oracle Communications Unified Inventory Management) - [CVE-2026-91610](https://cve.now/CVE-2026-91610.md): Vulnerability in Oracle REST Data Services (component: General). (CVSS 8.8, Oracle REST Data Services) - [CVE-2026-91609](https://cve.now/CVE-2026-91609.md): Vulnerability in Oracle REST Data Services (component: Graph QL). (CVSS 6.5, Oracle REST Data Services) - [CVE-2026-91608](https://cve.now/CVE-2026-91608.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). (CVSS 7.5, Oracle BI Publisher) - [CVE-2026-91607](https://cve.now/CVE-2026-91607.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). (CVSS 4.3, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91604](https://cve.now/CVE-2026-91604.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 7.5, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91600](https://cve.now/CVE-2026-91600.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer). (CVSS 4.3, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91598](https://cve.now/CVE-2026-91598.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Majel Mobile Service). (CVSS 4.3, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91597](https://cve.now/CVE-2026-91597.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 8.3, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91590](https://cve.now/CVE-2026-91590.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). (CVSS 5.4, Oracle BI Publisher) - [CVE-2026-91588](https://cve.now/CVE-2026-91588.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). (CVSS 6.5, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91582](https://cve.now/CVE-2026-91582.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). (CVSS 3.7, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91579](https://cve.now/CVE-2026-91579.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). (CVSS 8.8, Oracle BI Publisher) - [CVE-2026-91577](https://cve.now/CVE-2026-91577.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). (CVSS 6.4, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91576](https://cve.now/CVE-2026-91576.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). (CVSS 6.5, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91574](https://cve.now/CVE-2026-91574.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). (CVSS 6.5, Oracle BI Publisher) - [CVE-2026-91573](https://cve.now/CVE-2026-91573.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.2, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91568](https://cve.now/CVE-2026-91568.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 7.7, Oracle Database Server) - [CVE-2026-91565](https://cve.now/CVE-2026-91565.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 6.4, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91563](https://cve.now/CVE-2026-91563.md): Vulnerability in the Oracle OLAP component of Oracle Database Server. (CVSS 8.8, Oracle OLAP) - [CVE-2026-91562](https://cve.now/CVE-2026-91562.md): Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). (CVSS 4.4, Oracle PeopleSoft Enterprise FIN Inventory Brazil) - [CVE-2026-91559](https://cve.now/CVE-2026-91559.md): Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). (CVSS 4.4, Oracle PeopleSoft Enterprise FIN Manufacturing Brazil) - [CVE-2026-91557](https://cve.now/CVE-2026-91557.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). (CVSS 7.0, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91555](https://cve.now/CVE-2026-91555.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). (CVSS 6.1, Oracle BI Publisher) - [CVE-2026-91554](https://cve.now/CVE-2026-91554.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). (CVSS 6.5, Oracle BI Publisher) - [CVE-2026-91553](https://cve.now/CVE-2026-91553.md): Vulnerability in the PeopleSoft Enterprise FIN Product Configurator Brazil product of Oracle PeopleSoft (component: Product Configurator). (CVSS 4.4, Oracle PeopleSoft Enterprise FIN Product Configurator Brazil) - [CVE-2026-91552](https://cve.now/CVE-2026-91552.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 7.5, Oracle WebCenter Sites) - [CVE-2026-91550](https://cve.now/CVE-2026-91550.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.8, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91549](https://cve.now/CVE-2026-91549.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). (CVSS 7.8, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91547](https://cve.now/CVE-2026-91547.md): Vulnerability in Oracle GoldenGate (component: Vendor Access Module). (CVSS 5.5, Oracle GoldenGate) - [CVE-2026-91546](https://cve.now/CVE-2026-91546.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). (CVSS 8.1, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91545](https://cve.now/CVE-2026-91545.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). (CVSS 7.8, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91542](https://cve.now/CVE-2026-91542.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 7.5, Oracle WebCenter Sites) - [CVE-2026-91541](https://cve.now/CVE-2026-91541.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). (CVSS 6.5, Oracle PeopleSoft Enterprise FIN Common Objects Brazil) - [CVE-2026-91539](https://cve.now/CVE-2026-91539.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). (CVSS 7.8, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91537](https://cve.now/CVE-2026-91537.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 7.8, Oracle Solaris) - [CVE-2026-91536](https://cve.now/CVE-2026-91536.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 5.0, Oracle SOA Suite) - [CVE-2026-91535](https://cve.now/CVE-2026-91535.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). (CVSS 8.8, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91534](https://cve.now/CVE-2026-91534.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). (CVSS 8.6, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91532](https://cve.now/CVE-2026-91532.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Applications Manager) - [CVE-2026-91530](https://cve.now/CVE-2026-91530.md): Vulnerability in Oracle GoldenGate (component: Admin Client Executable). (CVSS 4.4, Oracle GoldenGate) - [CVE-2026-91528](https://cve.now/CVE-2026-91528.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). (CVSS 4.3, Oracle BI Publisher) - [CVE-2026-91527](https://cve.now/CVE-2026-91527.md): Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). (CVSS 8.8, Oracle ZFS Storage Appliance Kit) - [CVE-2026-91526](https://cve.now/CVE-2026-91526.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). (CVSS 4.7, Oracle BI Publisher) - [CVE-2026-91524](https://cve.now/CVE-2026-91524.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). (CVSS 4.3, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91523](https://cve.now/CVE-2026-91523.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). (CVSS 5.4, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91521](https://cve.now/CVE-2026-91521.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.8, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91520](https://cve.now/CVE-2026-91520.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.8, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91519](https://cve.now/CVE-2026-91519.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-91518](https://cve.now/CVE-2026-91518.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). (CVSS 5.4, Oracle BI Publisher) - [CVE-2026-91517](https://cve.now/CVE-2026-91517.md): Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin). (CVSS 8.0, Oracle Management Pack for Oracle GoldenGate) - [CVE-2026-91515](https://cve.now/CVE-2026-91515.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 7.5, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91514](https://cve.now/CVE-2026-91514.md): Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). (CVSS 6.5, Oracle BI Publisher) - [CVE-2026-91512](https://cve.now/CVE-2026-91512.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 7.2, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-91511](https://cve.now/CVE-2026-91511.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Purchasing) - [CVE-2026-91506](https://cve.now/CVE-2026-91506.md): Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 8.1, Oracle Workflow) - [CVE-2026-91505](https://cve.now/CVE-2026-91505.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). (CVSS 6.0, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-91504](https://cve.now/CVE-2026-91504.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). (CVSS 7.5, Oracle WebCenter Content) - [CVE-2026-91503](https://cve.now/CVE-2026-91503.md): Vulnerability in the VPD component of Oracle Database Server. (CVSS 8.1, Oracle Database Server) - [CVE-2026-91502](https://cve.now/CVE-2026-91502.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.3, Oracle WebLogic Server) - [CVE-2026-91501](https://cve.now/CVE-2026-91501.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). (CVSS 5.5, Oracle Identity Manager) - [CVE-2026-91499](https://cve.now/CVE-2026-91499.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 8.8, Oracle Database Server) - [CVE-2026-91497](https://cve.now/CVE-2026-91497.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). (CVSS 5.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-91496](https://cve.now/CVE-2026-91496.md): Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 7.5, Oracle Workflow) - [CVE-2026-91495](https://cve.now/CVE-2026-91495.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 9.8, Oracle WebCenter Content) - [CVE-2026-91494](https://cve.now/CVE-2026-91494.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). (CVSS 7.4, Oracle Identity Manager Connector) - [CVE-2026-91493](https://cve.now/CVE-2026-91493.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). (CVSS 7.5, Oracle Identity Manager Connector) - [CVE-2026-91492](https://cve.now/CVE-2026-91492.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). (CVSS 8.7, Oracle Identity Manager Connector) - [CVE-2026-91491](https://cve.now/CVE-2026-91491.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). (CVSS 9.8, Oracle Identity Manager Connector) - [CVE-2026-91490](https://cve.now/CVE-2026-91490.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). (CVSS 9.1, Oracle Identity Manager Connector) - [CVE-2026-91489](https://cve.now/CVE-2026-91489.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). (CVSS 7.1, Oracle Identity Manager Connector) - [CVE-2026-91488](https://cve.now/CVE-2026-91488.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). (CVSS 7.1, Oracle Identity Manager Connector) - [CVE-2026-91487](https://cve.now/CVE-2026-91487.md): Vulnerability in Oracle Java SE (component: Compiler). (CVSS 4.8, Oracle Java SE) - [CVE-2026-91486](https://cve.now/CVE-2026-91486.md): Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger). (CVSS 4.4, Oracle PeopleSoft Enterprise FIN General Ledger Brazil) - [CVE-2026-91485](https://cve.now/CVE-2026-91485.md): Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). (CVSS 3.8, Oracle PeopleSoft Enterprise FIN Cash Management) - [CVE-2026-91484](https://cve.now/CVE-2026-91484.md): Vulnerability in Oracle Java SE (component: Java plugin). (CVSS 7.5, Oracle Java SE) - [CVE-2026-91483](https://cve.now/CVE-2026-91483.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.8, Oracle Outside In Technology) - [CVE-2026-91482](https://cve.now/CVE-2026-91482.md): Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registration). (CVSS 6.5, Oracle PeopleSoft Enterprise SCM Strategic Sourcing) - [CVE-2026-91481](https://cve.now/CVE-2026-91481.md): Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration). (CVSS 5.4, Oracle PeopleSoft Enterprise SCM Purchasing) - [CVE-2026-91480](https://cve.now/CVE-2026-91480.md): Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). (CVSS 6.5, Oracle PeopleSoft Enterprise SCM Strategic Sourcing) - [CVE-2026-91479](https://cve.now/CVE-2026-91479.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 6.5, Oracle Database Server) - [CVE-2026-91478](https://cve.now/CVE-2026-91478.md): Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). (CVSS 8.8, Oracle PeopleSoft Enterprise SCM Strategic Sourcing) - [CVE-2026-91477](https://cve.now/CVE-2026-91477.md): Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). (CVSS 3.1, Oracle JavaFX) - [CVE-2026-91476](https://cve.now/CVE-2026-91476.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). (CVSS 5.3, Oracle PeopleSoft Enterprise FIN Common Objects Brazil) - [CVE-2026-91475](https://cve.now/CVE-2026-91475.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 6.6, Oracle Outside In Technology) - [CVE-2026-91474](https://cve.now/CVE-2026-91474.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). (CVSS 6.1, Oracle PeopleSoft Enterprise FIN Common Objects Brazil) - [CVE-2026-91473](https://cve.now/CVE-2026-91473.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). (CVSS 7.8, Oracle HTTP Server) - [CVE-2026-91471](https://cve.now/CVE-2026-91471.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework). (CVSS 3.7, Oracle PeopleSoft Enterprise CC Common Application Objects) - [CVE-2026-91468](https://cve.now/CVE-2026-91468.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-91467](https://cve.now/CVE-2026-91467.md): Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). (CVSS 6.6, Oracle Fusion Middleware Control) - [CVE-2026-91466](https://cve.now/CVE-2026-91466.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Management). (CVSS 6.4, Oracle PeopleSoft Enterprise FIN Common Objects Argentina) - [CVE-2026-91465](https://cve.now/CVE-2026-91465.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). (CVSS 7.5, Oracle PeopleSoft Enterprise FIN Common Objects Argentina) - [CVE-2026-91464](https://cve.now/CVE-2026-91464.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91463](https://cve.now/CVE-2026-91463.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91462](https://cve.now/CVE-2026-91462.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). (CVSS 5.9, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91461](https://cve.now/CVE-2026-91461.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 3.7, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91460](https://cve.now/CVE-2026-91460.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). (CVSS 7.8, Oracle Outside In Technology) - [CVE-2026-91459](https://cve.now/CVE-2026-91459.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). (CVSS 7.8, Oracle Outside In Technology) - [CVE-2026-91458](https://cve.now/CVE-2026-91458.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.8, Oracle Outside In Technology) - [CVE-2026-91457](https://cve.now/CVE-2026-91457.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). (CVSS 7.8, Oracle Outside In Technology) - [CVE-2026-91455](https://cve.now/CVE-2026-91455.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). (CVSS 5.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91453](https://cve.now/CVE-2026-91453.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightwe (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91452](https://cve.now/CVE-2026-91452.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91451](https://cve.now/CVE-2026-91451.md): Vulnerability in Oracle Java SE (component: Networking). (CVSS 5.3, Oracle Java SE) - [CVE-2026-91450](https://cve.now/CVE-2026-91450.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.4, Oracle Siebel CRM Deployment) - [CVE-2026-91449](https://cve.now/CVE-2026-91449.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.4, Oracle Siebel CRM Deployment) - [CVE-2026-91448](https://cve.now/CVE-2026-91448.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.5, Oracle Siebel CRM Deployment) - [CVE-2026-91447](https://cve.now/CVE-2026-91447.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.5, Oracle Siebel CRM Deployment) - [CVE-2026-91446](https://cve.now/CVE-2026-91446.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.7, Oracle Siebel CRM Deployment) - [CVE-2026-91445](https://cve.now/CVE-2026-91445.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard). (CVSS 8.2, Oracle Siebel CRM End User) - [CVE-2026-91444](https://cve.now/CVE-2026-91444.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.7, Oracle Siebel CRM Deployment) - [CVE-2026-91443](https://cve.now/CVE-2026-91443.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.5, Oracle Siebel CRM Deployment) - [CVE-2026-91442](https://cve.now/CVE-2026-91442.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 8.8, Oracle Siebel CRM Deployment) - [CVE-2026-91441](https://cve.now/CVE-2026-91441.md): Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). (CVSS 6.5, Oracle Siebel Apps - Customer Order Management) - [CVE-2026-91440](https://cve.now/CVE-2026-91440.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.5, Oracle Siebel CRM Deployment) - [CVE-2026-91439](https://cve.now/CVE-2026-91439.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 5.5, Oracle Siebel CRM Deployment) - [CVE-2026-91438](https://cve.now/CVE-2026-91438.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.1, Oracle Siebel CRM Deployment) - [CVE-2026-91437](https://cve.now/CVE-2026-91437.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 8.7, Oracle Siebel CRM Deployment) - [CVE-2026-91436](https://cve.now/CVE-2026-91436.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 3.9, Oracle Siebel CRM Deployment) - [CVE-2026-91435](https://cve.now/CVE-2026-91435.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.5, Oracle Siebel CRM Deployment) - [CVE-2026-91434](https://cve.now/CVE-2026-91434.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.7, Oracle Siebel CRM Deployment) - [CVE-2026-91433](https://cve.now/CVE-2026-91433.md): Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer). (CVSS 7.2, Oracle Siebel Apps - Field Service) - [CVE-2026-91432](https://cve.now/CVE-2026-91432.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 6.5, Oracle Siebel CRM End User) - [CVE-2026-91431](https://cve.now/CVE-2026-91431.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 5.5, Oracle Siebel CRM End User) - [CVE-2026-91430](https://cve.now/CVE-2026-91430.md): Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). (CVSS 6.5, Oracle Siebel Apps - Financial Services) - [CVE-2026-91429](https://cve.now/CVE-2026-91429.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.5, Oracle Siebel CRM Deployment) - [CVE-2026-91428](https://cve.now/CVE-2026-91428.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 4.3, Oracle Siebel CRM End User) - [CVE-2026-91427](https://cve.now/CVE-2026-91427.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 2.3, Oracle Siebel CRM Deployment) - [CVE-2026-91426](https://cve.now/CVE-2026-91426.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 5.5, Oracle Siebel CRM Deployment) - [CVE-2026-91424](https://cve.now/CVE-2026-91424.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.4, Oracle Siebel CRM Deployment) - [CVE-2026-91423](https://cve.now/CVE-2026-91423.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.0, Oracle Siebel CRM Deployment) - [CVE-2026-91422](https://cve.now/CVE-2026-91422.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 5.3, Oracle Siebel CRM Deployment) - [CVE-2026-91421](https://cve.now/CVE-2026-91421.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 5.9, Oracle Siebel CRM Deployment) - [CVE-2026-91420](https://cve.now/CVE-2026-91420.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.5, Oracle Siebel CRM Deployment) - [CVE-2026-91419](https://cve.now/CVE-2026-91419.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). (CVSS 7.8, Oracle HTTP Server) - [CVE-2026-91418](https://cve.now/CVE-2026-91418.md): Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (com (CVSS 5.3, Oracle Java SE · Oracle JavaFX +2) - [CVE-2026-91417](https://cve.now/CVE-2026-91417.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). (CVSS 5.3, Oracle Java SE · Oracle GraalVM Enterprise Edition) - [CVE-2026-91415](https://cve.now/CVE-2026-91415.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). (CVSS 7.0, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91414](https://cve.now/CVE-2026-91414.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 5.3, Oracle Siebel CRM Deployment) - [CVE-2026-91413](https://cve.now/CVE-2026-91413.md): Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). (CVSS 6.0, Oracle Siebel CRM Development) - [CVE-2026-91412](https://cve.now/CVE-2026-91412.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 6.5, Oracle Siebel CRM End User) - [CVE-2026-91411](https://cve.now/CVE-2026-91411.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). (CVSS 6.5, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91410](https://cve.now/CVE-2026-91410.md): Vulnerability in Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE) - [CVE-2026-91409](https://cve.now/CVE-2026-91409.md): Vulnerability in Oracle Java SE (component: Networking). (CVSS 3.7, Oracle Java SE) - [CVE-2026-91408](https://cve.now/CVE-2026-91408.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). (CVSS 9.8, Oracle Identity Manager) - [CVE-2026-91407](https://cve.now/CVE-2026-91407.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). (CVSS 8.8, Oracle Identity Manager) - [CVE-2026-91406](https://cve.now/CVE-2026-91406.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). (CVSS 7.5, Oracle Outside In Technology) - [CVE-2026-91405](https://cve.now/CVE-2026-91405.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). (CVSS 7.5, Oracle Outside In Technology) - [CVE-2026-91404](https://cve.now/CVE-2026-91404.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). (CVSS 4.0, Oracle Outside In Technology) - [CVE-2026-91402](https://cve.now/CVE-2026-91402.md): Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). (CVSS 3.1, Oracle Java SE · Oracle JavaFX +1) - [CVE-2026-91400](https://cve.now/CVE-2026-91400.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). (CVSS 3.1, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91399](https://cve.now/CVE-2026-91399.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Acc (CVSS 4.3, Oracle Primavera P6 Enterprise Project Portfolio Management) - [CVE-2026-91398](https://cve.now/CVE-2026-91398.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network (CVSS 6.8, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91397](https://cve.now/CVE-2026-91397.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Service (CVSS 3.6, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91396](https://cve.now/CVE-2026-91396.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility (CVSS 6.5, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91395](https://cve.now/CVE-2026-91395.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility (CVSS 6.5, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91394](https://cve.now/CVE-2026-91394.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). (CVSS 5.9, Oracle Java SE · Oracle GraalVM for JDK) - [CVE-2026-91393](https://cve.now/CVE-2026-91393.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 3.1, Oracle Siebel CRM End User) - [CVE-2026-91392](https://cve.now/CVE-2026-91392.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 3.7, Oracle Siebel CRM End User) - [CVE-2026-91391](https://cve.now/CVE-2026-91391.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 3.7, Oracle Siebel CRM End User) - [CVE-2026-91390](https://cve.now/CVE-2026-91390.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 5.4, Oracle Siebel CRM End User) - [CVE-2026-91389](https://cve.now/CVE-2026-91389.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 5.4, Oracle Siebel CRM End User) - [CVE-2026-91388](https://cve.now/CVE-2026-91388.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 4.7, Oracle Siebel CRM End User) - [CVE-2026-91387](https://cve.now/CVE-2026-91387.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). (CVSS 5.4, Oracle Siebel CRM End User) - [CVE-2026-91386](https://cve.now/CVE-2026-91386.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 6.8, Oracle JD Edwards EnterpriseOne Orchestrator) - [CVE-2026-91385](https://cve.now/CVE-2026-91385.md): Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). (CVSS 5.4, Oracle Java SE · Oracle JavaFX +1) - [CVE-2026-91384](https://cve.now/CVE-2026-91384.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91383](https://cve.now/CVE-2026-91383.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 6.6, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91382](https://cve.now/CVE-2026-91382.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). (CVSS 6.5, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91381](https://cve.now/CVE-2026-91381.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). (CVSS 3.7, Oracle Java SE · Oracle GraalVM Enterprise Edition) - [CVE-2026-91380](https://cve.now/CVE-2026-91380.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility (CVSS 4.0, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91379](https://cve.now/CVE-2026-91379.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK too (CVSS 4.7, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91378](https://cve.now/CVE-2026-91378.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 6.1, Oracle Siebel CRM Integration) - [CVE-2026-91377](https://cve.now/CVE-2026-91377.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 7.5, Oracle Siebel CRM Integration) - [CVE-2026-91376](https://cve.now/CVE-2026-91376.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Acc (CVSS 6.5, Oracle Primavera P6 Enterprise Project Portfolio Management) - [CVE-2026-91375](https://cve.now/CVE-2026-91375.md): Vulnerability in Oracle Java SE (component: Libraries). (CVSS 4.7, Oracle Java SE) - [CVE-2026-91374](https://cve.now/CVE-2026-91374.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Service (CVSS 4.8, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91373](https://cve.now/CVE-2026-91373.md): Vulnerability in Oracle Java SE (component: JSSE). (CVSS 5.3, Oracle Java SE) - [CVE-2026-91372](https://cve.now/CVE-2026-91372.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 3.3, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91371](https://cve.now/CVE-2026-91371.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.8, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91370](https://cve.now/CVE-2026-91370.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.3, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91369](https://cve.now/CVE-2026-91369.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.3, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91368](https://cve.now/CVE-2026-91368.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 4.1, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91367](https://cve.now/CVE-2026-91367.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 6.5, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91366](https://cve.now/CVE-2026-91366.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 4.7, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91365](https://cve.now/CVE-2026-91365.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.9, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91364](https://cve.now/CVE-2026-91364.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 6.8, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91363](https://cve.now/CVE-2026-91363.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 3.7, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91362](https://cve.now/CVE-2026-91362.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.3, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91361](https://cve.now/CVE-2026-91361.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.3, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91360](https://cve.now/CVE-2026-91360.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 6.5, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91359](https://cve.now/CVE-2026-91359.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.3, Oracle Siebel CRM Cloud Applications) - [CVE-2026-91358](https://cve.now/CVE-2026-91358.md): Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case management Service (11g+ (CVSS 8.2, Oracle Business Process Management Suite) - [CVE-2026-91357](https://cve.now/CVE-2026-91357.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). (CVSS 5.3, Oracle Order Management) - [CVE-2026-91356](https://cve.now/CVE-2026-91356.md): Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switze (CVSS 4.2, Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland) - [CVE-2026-91355](https://cve.now/CVE-2026-91355.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 8.4, Oracle Outside In Technology) - [CVE-2026-91354](https://cve.now/CVE-2026-91354.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 9.9, Oracle Outside In Technology) - [CVE-2026-91353](https://cve.now/CVE-2026-91353.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 8.6, Oracle Outside In Technology) - [CVE-2026-91352](https://cve.now/CVE-2026-91352.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 5.3, Oracle Outside In Technology) - [CVE-2026-91351](https://cve.now/CVE-2026-91351.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 6.1, Oracle Outside In Technology) - [CVE-2026-91350](https://cve.now/CVE-2026-91350.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 7.5, Oracle Outside In Technology) - [CVE-2026-91349](https://cve.now/CVE-2026-91349.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 7.5, Oracle Outside In Technology) - [CVE-2026-91348](https://cve.now/CVE-2026-91348.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 8.4, Oracle Solaris) - [CVE-2026-91347](https://cve.now/CVE-2026-91347.md): Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). (CVSS 8.5, Oracle iSupport) - [CVE-2026-91346](https://cve.now/CVE-2026-91346.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 8.2, Oracle Outside In Technology) - [CVE-2026-91345](https://cve.now/CVE-2026-91345.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 7.5, Oracle Outside In Technology) - [CVE-2026-91344](https://cve.now/CVE-2026-91344.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 7.5, Oracle Outside In Technology) - [CVE-2026-91343](https://cve.now/CVE-2026-91343.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 8.6, Oracle Outside In Technology) - [CVE-2026-91342](https://cve.now/CVE-2026-91342.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 8.2, Oracle Outside In Technology) - [CVE-2026-91341](https://cve.now/CVE-2026-91341.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 9.1, Oracle Outside In Technology) - [CVE-2026-91340](https://cve.now/CVE-2026-91340.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). (CVSS 8.8, Oracle Outside In Technology) - [CVE-2026-91339](https://cve.now/CVE-2026-91339.md): Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). (CVSS 6.5, Oracle iSupport) - [CVE-2026-91338](https://cve.now/CVE-2026-91338.md): Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations). (CVSS 7.1, Oracle iSupport) - [CVE-2026-91337](https://cve.now/CVE-2026-91337.md): Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). (CVSS 7.4, Oracle iProcurement) - [CVE-2026-91336](https://cve.now/CVE-2026-91336.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 6.5, Oracle Solaris) - [CVE-2026-91335](https://cve.now/CVE-2026-91335.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). (CVSS 2.6, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91334](https://cve.now/CVE-2026-91334.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO (CVSS 3.7, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-91333](https://cve.now/CVE-2026-91333.md): Vulnerability in Oracle Java SE (component: Security). (CVSS 3.7, Oracle Java SE) - [CVE-2026-91332](https://cve.now/CVE-2026-91332.md): Vulnerability in Oracle Java SE (component: Networking). (CVSS 5.3, Oracle Java SE) - [CVE-2026-91331](https://cve.now/CVE-2026-91331.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects (CVSS 3.8, Oracle PeopleSoft Enterprise CC Common Application Objects) - [CVE-2026-91330](https://cve.now/CVE-2026-91330.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 3.3, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91329](https://cve.now/CVE-2026-91329.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91328](https://cve.now/CVE-2026-91328.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC). (CVSS 7.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91327](https://cve.now/CVE-2026-91327.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 7.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91326](https://cve.now/CVE-2026-91326.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91325](https://cve.now/CVE-2026-91325.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 7.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91324](https://cve.now/CVE-2026-91324.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). (CVSS 4.7, Oracle Solaris) - [CVE-2026-91323](https://cve.now/CVE-2026-91323.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server) - [CVE-2026-91322](https://cve.now/CVE-2026-91322.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). (CVSS 3.3, Oracle JDeveloper) - [CVE-2026-91321](https://cve.now/CVE-2026-91321.md): Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management). (CVSS 7.5, Oracle iProcurement) - [CVE-2026-91320](https://cve.now/CVE-2026-91320.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). (CVSS 5.7, Oracle JDeveloper) - [CVE-2026-91319](https://cve.now/CVE-2026-91319.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects). (CVSS 5.9, Oracle JDeveloper) - [CVE-2026-91318](https://cve.now/CVE-2026-91318.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). (CVSS 6.5, Oracle JDeveloper) - [CVE-2026-91317](https://cve.now/CVE-2026-91317.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Databinding). (CVSS 5.9, Oracle JDeveloper) - [CVE-2026-91316](https://cve.now/CVE-2026-91316.md): Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). (CVSS 7.2, Oracle iProcurement) - [CVE-2026-91315](https://cve.now/CVE-2026-91315.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 7.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91314](https://cve.now/CVE-2026-91314.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 7.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91313](https://cve.now/CVE-2026-91313.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91312](https://cve.now/CVE-2026-91312.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91311](https://cve.now/CVE-2026-91311.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 7.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91310](https://cve.now/CVE-2026-91310.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91309](https://cve.now/CVE-2026-91309.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). (CVSS 5.9, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91308](https://cve.now/CVE-2026-91308.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 7.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91307](https://cve.now/CVE-2026-91307.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 7.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91306](https://cve.now/CVE-2026-91306.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 7.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91305](https://cve.now/CVE-2026-91305.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 9.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91304](https://cve.now/CVE-2026-91304.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 7.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91303](https://cve.now/CVE-2026-91303.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91302](https://cve.now/CVE-2026-91302.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 3.3, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91301](https://cve.now/CVE-2026-91301.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 3.6, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91300](https://cve.now/CVE-2026-91300.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 3.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91299](https://cve.now/CVE-2026-91299.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 10.0, Oracle JD Edwards EnterpriseOne Orchestrator) - [CVE-2026-91298](https://cve.now/CVE-2026-91298.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 5.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91297](https://cve.now/CVE-2026-91297.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 6.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91296](https://cve.now/CVE-2026-91296.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91295](https://cve.now/CVE-2026-91295.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91294](https://cve.now/CVE-2026-91294.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). (CVSS 4.3, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91293](https://cve.now/CVE-2026-91293.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). (CVSS 5.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91292](https://cve.now/CVE-2026-91292.md): Vulnerability in the JD Edwards EnterpriseOne Localizations product of Oracle JD Edwards (component: LATAM). (CVSS 5.4, Oracle JD Edwards EnterpriseOne Localizations) - [CVE-2026-91291](https://cve.now/CVE-2026-91291.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). (CVSS 3.6, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91290](https://cve.now/CVE-2026-91290.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 5.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91289](https://cve.now/CVE-2026-91289.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 5.3, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91288](https://cve.now/CVE-2026-91288.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). (CVSS 7.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91287](https://cve.now/CVE-2026-91287.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91286](https://cve.now/CVE-2026-91286.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 8.2, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91285](https://cve.now/CVE-2026-91285.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Orchestrator) - [CVE-2026-91284](https://cve.now/CVE-2026-91284.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91283](https://cve.now/CVE-2026-91283.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 4.3, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91282](https://cve.now/CVE-2026-91282.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal SEC). (CVSS 5.9, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91281](https://cve.now/CVE-2026-91281.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 6.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91280](https://cve.now/CVE-2026-91280.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 6.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91279](https://cve.now/CVE-2026-91279.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 6.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91278](https://cve.now/CVE-2026-91278.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 5.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91277](https://cve.now/CVE-2026-91277.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 5.3, Oracle JD Edwards EnterpriseOne Orchestrator) - [CVE-2026-91276](https://cve.now/CVE-2026-91276.md): Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). (CVSS 5.3, Oracle JD Edwards EnterpriseOne Orchestrator) - [CVE-2026-91275](https://cve.now/CVE-2026-91275.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 6.6, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91274](https://cve.now/CVE-2026-91274.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91273](https://cve.now/CVE-2026-91273.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC). (CVSS 8.6, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91272](https://cve.now/CVE-2026-91272.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). (CVSS 7.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91271](https://cve.now/CVE-2026-91271.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91270](https://cve.now/CVE-2026-91270.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91269](https://cve.now/CVE-2026-91269.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91268](https://cve.now/CVE-2026-91268.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91267](https://cve.now/CVE-2026-91267.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). (CVSS 8.6, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91266](https://cve.now/CVE-2026-91266.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). (CVSS 8.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91265](https://cve.now/CVE-2026-91265.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 9.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-91264](https://cve.now/CVE-2026-91264.md): Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). (CVSS 3.7, Oracle PeopleSoft Enterprise SCM Manufacturing) - [CVE-2026-91263](https://cve.now/CVE-2026-91263.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). (CVSS 4.9, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-91262](https://cve.now/CVE-2026-91262.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 5.4, Oracle WebCenter Content) - [CVE-2026-91261](https://cve.now/CVE-2026-91261.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 3.1, Oracle WebCenter Content) - [CVE-2026-91260](https://cve.now/CVE-2026-91260.md): Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). (CVSS 7.2, Oracle iProcurement) - [CVE-2026-91259](https://cve.now/CVE-2026-91259.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager) - [CVE-2026-91257](https://cve.now/CVE-2026-91257.md): Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). (CVSS 6.5, Oracle iSupport) - [CVE-2026-91256](https://cve.now/CVE-2026-91256.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). (CVSS 7.1, Oracle Solaris) - [CVE-2026-91255](https://cve.now/CVE-2026-91255.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 7.5, Oracle Solaris) - [CVE-2026-91254](https://cve.now/CVE-2026-91254.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 7.5, Oracle Solaris) - [CVE-2026-91253](https://cve.now/CVE-2026-91253.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 7.8, Oracle Solaris) - [CVE-2026-91252](https://cve.now/CVE-2026-91252.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). (CVSS 8.2, Oracle Solaris) - [CVE-2026-91251](https://cve.now/CVE-2026-91251.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). (CVSS 9.9, Oracle SOA Suite) - [CVE-2026-91250](https://cve.now/CVE-2026-91250.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). (CVSS 9.9, Oracle SOA Suite) - [CVE-2026-91249](https://cve.now/CVE-2026-91249.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). (CVSS 3.3, Oracle Solaris) - [CVE-2026-91248](https://cve.now/CVE-2026-91248.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 5.3, Oracle WebCenter Portal) - [CVE-2026-91247](https://cve.now/CVE-2026-91247.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 5.9, Oracle WebCenter Portal) - [CVE-2026-91246](https://cve.now/CVE-2026-91246.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 6.1, Oracle WebCenter Portal) - [CVE-2026-91245](https://cve.now/CVE-2026-91245.md): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). (CVSS 6.5, Oracle WebCenter Portal) - [CVE-2026-91244](https://cve.now/CVE-2026-91244.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). (CVSS 4.7, Oracle Solaris) - [CVE-2026-91243](https://cve.now/CVE-2026-91243.md): Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 9.6, Oracle Business Process Management Suite) - [CVE-2026-91242](https://cve.now/CVE-2026-91242.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). (CVSS 7.4, Oracle Solaris) - [CVE-2026-91241](https://cve.now/CVE-2026-91241.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). (CVSS 9.1, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-91240](https://cve.now/CVE-2026-91240.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 5.9, Oracle WebCenter Sites) - [CVE-2026-91239](https://cve.now/CVE-2026-91239.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 8.8, Oracle SOA Suite) - [CVE-2026-91238](https://cve.now/CVE-2026-91238.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 7.1, Oracle SOA Suite) - [CVE-2026-91237](https://cve.now/CVE-2026-91237.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 7.5, Oracle SOA Suite) - [CVE-2026-91236](https://cve.now/CVE-2026-91236.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 9.8, Oracle SOA Suite) - [CVE-2026-91235](https://cve.now/CVE-2026-91235.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 9.8, Oracle SOA Suite) - [CVE-2026-91234](https://cve.now/CVE-2026-91234.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 9.8, Oracle SOA Suite) - [CVE-2026-91233](https://cve.now/CVE-2026-91233.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). (CVSS 9.8, Oracle SOA Suite) - [CVE-2026-91232](https://cve.now/CVE-2026-91232.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 9.9, Oracle SOA Suite) - [CVE-2026-91231](https://cve.now/CVE-2026-91231.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). (CVSS 10.0, Oracle SOA Suite) - [CVE-2026-91230](https://cve.now/CVE-2026-91230.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 9.3, Oracle SOA Suite) - [CVE-2026-91229](https://cve.now/CVE-2026-91229.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 7.5, Oracle SOA Suite) - [CVE-2026-91228](https://cve.now/CVE-2026-91228.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 7.1, Oracle SOA Suite) - [CVE-2026-91227](https://cve.now/CVE-2026-91227.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 7.5, Oracle SOA Suite) - [CVE-2026-91226](https://cve.now/CVE-2026-91226.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 7.5, Oracle SOA Suite) - [CVE-2026-91225](https://cve.now/CVE-2026-91225.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). (CVSS 9.1, Oracle SOA Suite) - [CVE-2026-91224](https://cve.now/CVE-2026-91224.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 9.9, Oracle SOA Suite) - [CVE-2026-91223](https://cve.now/CVE-2026-91223.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 8.8, Oracle SOA Suite) - [CVE-2026-91222](https://cve.now/CVE-2026-91222.md): Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). (CVSS 9.9, Oracle Business Process Management Suite) - [CVE-2026-91221](https://cve.now/CVE-2026-91221.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 10.0, Oracle SOA Suite) - [CVE-2026-91220](https://cve.now/CVE-2026-91220.md): Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). (CVSS 9.8, Oracle Business Process Management Suite) - [CVE-2026-91219](https://cve.now/CVE-2026-91219.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 8.6, Oracle SOA Suite) - [CVE-2026-91218](https://cve.now/CVE-2026-91218.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 9.6, Oracle SOA Suite) - [CVE-2026-91217](https://cve.now/CVE-2026-91217.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 8.6, Oracle SOA Suite) - [CVE-2026-91216](https://cve.now/CVE-2026-91216.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 10.0, Oracle SOA Suite) - [CVE-2026-91215](https://cve.now/CVE-2026-91215.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 8.8, Oracle SOA Suite) - [CVE-2026-91214](https://cve.now/CVE-2026-91214.md): Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). (CVSS 9.8, Oracle SOA Suite) - [CVE-2026-91213](https://cve.now/CVE-2026-91213.md): Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer). (CVSS 8.8, Oracle Business Process Management Suite) - [CVE-2026-91212](https://cve.now/CVE-2026-91212.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). (CVSS 8.6, Oracle Identity Manager Connector) - [CVE-2026-91211](https://cve.now/CVE-2026-91211.md): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). (CVSS 8.7, Oracle Identity Manager Connector) - [CVE-2026-91210](https://cve.now/CVE-2026-91210.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.5, Oracle WebCenter Content) - [CVE-2026-91209](https://cve.now/CVE-2026-91209.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). (CVSS 4.2, Oracle Solaris) - [CVE-2026-91208](https://cve.now/CVE-2026-91208.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). (CVSS 5.1, Oracle Solaris) - [CVE-2026-87423](https://cve.now/CVE-2026-87423.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). (CVSS 4.5, Oracle Solaris) - [CVE-2026-87422](https://cve.now/CVE-2026-87422.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). (CVSS 2.5, Oracle Solaris) - [CVE-2026-87421](https://cve.now/CVE-2026-87421.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). (CVSS 7.1, Oracle Solaris) - [CVE-2026-87420](https://cve.now/CVE-2026-87420.md): Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle Service Bus) - [CVE-2026-87419](https://cve.now/CVE-2026-87419.md): Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle Service Bus) - [CVE-2026-87418](https://cve.now/CVE-2026-87418.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). (CVSS 2.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87417](https://cve.now/CVE-2026-87417.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). (CVSS 7.5, Oracle Solaris) - [CVE-2026-87416](https://cve.now/CVE-2026-87416.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 3.7, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87415](https://cve.now/CVE-2026-87415.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 5.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87414](https://cve.now/CVE-2026-87414.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). (CVSS 3.1, Oracle Solaris) - [CVE-2026-87413](https://cve.now/CVE-2026-87413.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). (CVSS 5.5, Oracle Solaris) - [CVE-2026-87412](https://cve.now/CVE-2026-87412.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 2.7, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87411](https://cve.now/CVE-2026-87411.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). (CVSS 5.5, Oracle Solaris) - [CVE-2026-87410](https://cve.now/CVE-2026-87410.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 6.8, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87409](https://cve.now/CVE-2026-87409.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87408](https://cve.now/CVE-2026-87408.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). (CVSS 8.7, Oracle Applications Framework) - [CVE-2026-87407](https://cve.now/CVE-2026-87407.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Security). (CVSS 6.5, Oracle Applications Framework) - [CVE-2026-87404](https://cve.now/CVE-2026-87404.md): Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine). (CVSS 7.5, Oracle Pasta) - [CVE-2026-87403](https://cve.now/CVE-2026-87403.md): Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). (CVSS 7.1, Oracle Applications DBA) - [CVE-2026-87402](https://cve.now/CVE-2026-87402.md): Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). (CVSS 7.3, Oracle Applications DBA) - [CVE-2026-87401](https://cve.now/CVE-2026-87401.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher). (CVSS 3.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87400](https://cve.now/CVE-2026-87400.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.9, Oracle WebCenter Content) - [CVE-2026-87399](https://cve.now/CVE-2026-87399.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.3, Oracle WebCenter Content) - [CVE-2026-87398](https://cve.now/CVE-2026-87398.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.5, Oracle Outside In Technology) - [CVE-2026-87397](https://cve.now/CVE-2026-87397.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 8.8, Oracle Outside In Technology) - [CVE-2026-87396](https://cve.now/CVE-2026-87396.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 6.5, Oracle Outside In Technology) - [CVE-2026-87395](https://cve.now/CVE-2026-87395.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 7.5, Oracle Outside In Technology) - [CVE-2026-87394](https://cve.now/CVE-2026-87394.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 8.2, Oracle Outside In Technology) - [CVE-2026-87393](https://cve.now/CVE-2026-87393.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 6.5, Oracle Outside In Technology) - [CVE-2026-87392](https://cve.now/CVE-2026-87392.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebCenter Content: Imaging) - [CVE-2026-87391](https://cve.now/CVE-2026-87391.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 5.5, Oracle WebCenter Content: Imaging) - [CVE-2026-87390](https://cve.now/CVE-2026-87390.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 5.4, Oracle WebCenter Content) - [CVE-2026-87389](https://cve.now/CVE-2026-87389.md): Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). (CVSS 3.7, Oracle JD Edwards EnterpriseOne Human Resources Management) - [CVE-2026-87388](https://cve.now/CVE-2026-87388.md): Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management). (CVSS 5.3, Oracle JD Edwards EnterpriseOne Configurator) - [CVE-2026-87387](https://cve.now/CVE-2026-87387.md): Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (component: Homebuilder Management). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Homebuilder) - [CVE-2026-87386](https://cve.now/CVE-2026-87386.md): Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). (CVSS 5.3, Oracle JD Edwards EnterpriseOne General Ledger) - [CVE-2026-87385](https://cve.now/CVE-2026-87385.md): Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). (CVSS 4.8, Oracle JD Edwards EnterpriseOne Human Resources Management) - [CVE-2026-87384](https://cve.now/CVE-2026-87384.md): Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). (CVSS 5.4, Oracle JD Edwards EnterpriseOne Human Resources Management) - [CVE-2026-87383](https://cve.now/CVE-2026-87383.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). (CVSS 6.7, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87382](https://cve.now/CVE-2026-87382.md): Vulnerability in the JD Edwards EnterpriseOne Operational Sourcing product of Oracle JD Edwards (component: Operational Sourcing). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Operational Sourcing) - [CVE-2026-87381](https://cve.now/CVE-2026-87381.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). (CVSS 5.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-113730](https://cve.now/CVE-2026-113730.md): OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies (CVSS 5.6, orphan-oss ognl · ognl:ognl) - [CVE-2026-87380](https://cve.now/CVE-2026-87380.md): Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards (component: Sales Order Entry). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Sales Order Entry) - [CVE-2026-87379](https://cve.now/CVE-2026-87379.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 4.3, Oracle WebCenter Content: Imaging) - [CVE-2026-87378](https://cve.now/CVE-2026-87378.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebCenter Content: Imaging) - [CVE-2026-87377](https://cve.now/CVE-2026-87377.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 6.8, Oracle WebCenter Content: Imaging) - [CVE-2026-87376](https://cve.now/CVE-2026-87376.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 6.8, Oracle WebCenter Content: Imaging) - [CVE-2026-87375](https://cve.now/CVE-2026-87375.md): Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebCenter Content: Imaging) - [CVE-2026-87374](https://cve.now/CVE-2026-87374.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.8, Oracle WebCenter Content) - [CVE-2026-87373](https://cve.now/CVE-2026-87373.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.5, Oracle WebCenter Content) - [CVE-2026-87372](https://cve.now/CVE-2026-87372.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.5, Oracle WebCenter Content) - [CVE-2026-87371](https://cve.now/CVE-2026-87371.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.8, Oracle WebCenter Content) - [CVE-2026-87370](https://cve.now/CVE-2026-87370.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.5, Oracle WebCenter Content) - [CVE-2026-87369](https://cve.now/CVE-2026-87369.md): Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle Service Bus) - [CVE-2026-87367](https://cve.now/CVE-2026-87367.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 3.7, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-87366](https://cve.now/CVE-2026-87366.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). (CVSS 4.9, Oracle Applications Framework) - [CVE-2026-87365](https://cve.now/CVE-2026-87365.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.5, Oracle WebCenter Content) - [CVE-2026-87364](https://cve.now/CVE-2026-87364.md): Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle Service Bus) - [CVE-2026-87363](https://cve.now/CVE-2026-87363.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Payroll) - [CVE-2026-87362](https://cve.now/CVE-2026-87362.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). (CVSS 6.5, Oracle Agile PLM) - [CVE-2026-87361](https://cve.now/CVE-2026-87361.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 4.3, Oracle WebCenter Content) - [CVE-2026-87360](https://cve.now/CVE-2026-87360.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 5.3, Oracle WebCenter Content) - [CVE-2026-87359](https://cve.now/CVE-2026-87359.md): Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). (CVSS 8.8, Oracle Service Bus) - [CVE-2026-87358](https://cve.now/CVE-2026-87358.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle General Ledger) - [CVE-2026-87357](https://cve.now/CVE-2026-87357.md): Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Order Capture) - [CVE-2026-87356](https://cve.now/CVE-2026-87356.md): Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). (CVSS 7.8, Oracle Applications Platform Engineering) - [CVE-2026-87355](https://cve.now/CVE-2026-87355.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). (CVSS 4.4, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87354](https://cve.now/CVE-2026-87354.md): Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator). (CVSS 4.3, Oracle TimesTen In-Memory Database) - [CVE-2026-87353](https://cve.now/CVE-2026-87353.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). (CVSS 4.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87352](https://cve.now/CVE-2026-87352.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). (CVSS 4.4, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87351](https://cve.now/CVE-2026-87351.md): Vulnerability in Oracle GoldenGate (component: Admin Server Executable). (CVSS 8.8, Oracle GoldenGate) - [CVE-2026-87350](https://cve.now/CVE-2026-87350.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 4.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87349](https://cve.now/CVE-2026-87349.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87348](https://cve.now/CVE-2026-87348.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). (CVSS 4.2, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87347](https://cve.now/CVE-2026-87347.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). (CVSS 9.6, Oracle HTTP Server) - [CVE-2026-87346](https://cve.now/CVE-2026-87346.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle… (CVSS 8.7, Oracle HTTP Server) - [CVE-2026-87345](https://cve.now/CVE-2026-87345.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 6.1, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87344](https://cve.now/CVE-2026-87344.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87343](https://cve.now/CVE-2026-87343.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 4.8, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87342](https://cve.now/CVE-2026-87342.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87340](https://cve.now/CVE-2026-87340.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 3.7, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87339](https://cve.now/CVE-2026-87339.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). (CVSS 3.1, Oracle Siebel CRM Integration) - [CVE-2026-87338](https://cve.now/CVE-2026-87338.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). (CVSS 6.9, Oracle Siebel CRM Integration) - [CVE-2026-87337](https://cve.now/CVE-2026-87337.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 10.0, Oracle Access Manager) - [CVE-2026-87336](https://cve.now/CVE-2026-87336.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 5.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-87335](https://cve.now/CVE-2026-87335.md): Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Applications DBA) - [CVE-2026-87334](https://cve.now/CVE-2026-87334.md): Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). (CVSS 5.5, Oracle JDeveloper) - [CVE-2026-87333](https://cve.now/CVE-2026-87333.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 3.6, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87332](https://cve.now/CVE-2026-87332.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - Cloud). (CVSS 3.0, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87331](https://cve.now/CVE-2026-87331.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). (CVSS 3.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87330](https://cve.now/CVE-2026-87330.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). (CVSS 4.2, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87329](https://cve.now/CVE-2026-87329.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 6.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87328](https://cve.now/CVE-2026-87328.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 5.9, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87327](https://cve.now/CVE-2026-87327.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 5.9, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87326](https://cve.now/CVE-2026-87326.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 5.9, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87325](https://cve.now/CVE-2026-87325.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 6.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87324](https://cve.now/CVE-2026-87324.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 6.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87323](https://cve.now/CVE-2026-87323.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). (CVSS 5.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87322](https://cve.now/CVE-2026-87322.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.4, Oracle VM VirtualBox) - [CVE-2026-87321](https://cve.now/CVE-2026-87321.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). (CVSS 6.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87320](https://cve.now/CVE-2026-87320.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). (CVSS 6.7, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87319](https://cve.now/CVE-2026-87319.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 6.3, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87318](https://cve.now/CVE-2026-87318.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 6.3, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87317](https://cve.now/CVE-2026-87317.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 4.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87316](https://cve.now/CVE-2026-87316.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 7.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87315](https://cve.now/CVE-2026-87315.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 7.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87314](https://cve.now/CVE-2026-87314.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). (CVSS 7.4, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87313](https://cve.now/CVE-2026-87313.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-111879](https://cve.now/CVE-2026-111879.md): DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open\_data does not release the table's lock (CVSS 6.5, DBI) - [CVE-2026-87312](https://cve.now/CVE-2026-87312.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 7.5, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87311](https://cve.now/CVE-2026-87311.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.6, Oracle VM VirtualBox) - [CVE-2026-87310](https://cve.now/CVE-2026-87310.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Database and Comm SEC). (CVSS 8.8, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87309](https://cve.now/CVE-2026-87309.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87308](https://cve.now/CVE-2026-87308.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 7.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87307](https://cve.now/CVE-2026-87307.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). (CVSS 7.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87306](https://cve.now/CVE-2026-87306.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87305](https://cve.now/CVE-2026-87305.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). (CVSS 8.1, Oracle JD Edwards EnterpriseOne Tools) - [CVE-2026-87304](https://cve.now/CVE-2026-87304.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). (CVSS 8.6, Oracle Outside In Technology) - [CVE-2026-87303](https://cve.now/CVE-2026-87303.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.9, Oracle VM VirtualBox) - [CVE-2026-87302](https://cve.now/CVE-2026-87302.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.1, Oracle WebLogic Server) - [CVE-2026-87301](https://cve.now/CVE-2026-87301.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.4, Oracle VM VirtualBox) - [CVE-2026-87300](https://cve.now/CVE-2026-87300.md): Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for (CVSS 8.7, Oracle Weblogic Server Proxy Plug-in) - [CVE-2026-87299](https://cve.now/CVE-2026-87299.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.1, Oracle WebCenter Content) - [CVE-2026-87298](https://cve.now/CVE-2026-87298.md): Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). (CVSS 6.5, Oracle WebCenter Content) - [CVE-2026-87297](https://cve.now/CVE-2026-87297.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). (CVSS 6.7, Oracle Communications Billing and Revenue Management) - [CVE-2026-87296](https://cve.now/CVE-2026-87296.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 7.5, Oracle Access Manager) - [CVE-2026-87295](https://cve.now/CVE-2026-87295.md): Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). (CVSS 6.5, Oracle HRMS) - [CVE-2026-87294](https://cve.now/CVE-2026-87294.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit (CVSS 6.5, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-87293](https://cve.now/CVE-2026-87293.md): Vulnerability in Oracle Java SE (component: RMI). (CVSS 5.4, Oracle Java SE) - [CVE-2026-87292](https://cve.now/CVE-2026-87292.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network (CVSS 3.7, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-87291](https://cve.now/CVE-2026-87291.md): Vulnerability in Oracle Java SE (component: Networking). (CVSS 5.3, Oracle Java SE) - [CVE-2026-87290](https://cve.now/CVE-2026-87290.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 5.9, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-87263](https://cve.now/CVE-2026-87263.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). (CVSS 8.8, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-87255](https://cve.now/CVE-2026-87255.md): Vulnerability in Oracle Java SE (component: Compiler). (CVSS 3.7, Oracle Java SE) - [CVE-2026-87251](https://cve.now/CVE-2026-87251.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 9.8, Oracle Access Manager) - [CVE-2026-83427](https://cve.now/CVE-2026-83427.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). (CVSS 6.6, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-83426](https://cve.now/CVE-2026-83426.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.7, Oracle Access Manager) - [CVE-2026-83409](https://cve.now/CVE-2026-83409.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.1, Oracle Access Manager) - [CVE-2026-83407](https://cve.now/CVE-2026-83407.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 8.6, Oracle Access Manager) - [CVE-2026-83406](https://cve.now/CVE-2026-83406.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). (CVSS 6.7, Oracle Communications Billing and Revenue Management) - [CVE-2026-83404](https://cve.now/CVE-2026-83404.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). (CVSS 7.5, Oracle MySQL Connectors) - [CVE-2026-83403](https://cve.now/CVE-2026-83403.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager) - [CVE-2026-83402](https://cve.now/CVE-2026-83402.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 8.8, Oracle Identity Manager) - [CVE-2026-83401](https://cve.now/CVE-2026-83401.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). (CVSS 6.1, Oracle Identity Manager) - [CVE-2026-83400](https://cve.now/CVE-2026-83400.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-83399](https://cve.now/CVE-2026-83399.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server) - [CVE-2026-83398](https://cve.now/CVE-2026-83398.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Data Transforms). (CVSS 8.2, Oracle Data Integrator) - [CVE-2026-83397](https://cve.now/CVE-2026-83397.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). (CVSS 9.8, Oracle Data Integrator) - [CVE-2026-83396](https://cve.now/CVE-2026-83396.md): Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). (CVSS 9.8, Oracle Data Integrator) - [CVE-2026-83395](https://cve.now/CVE-2026-83395.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Network (CVSS 6.5, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-83394](https://cve.now/CVE-2026-83394.md): Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). (CVSS 6.8, Oracle Demand Planning) - [CVE-2026-83393](https://cve.now/CVE-2026-83393.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.5, Oracle Product Hub) - [CVE-2026-83392](https://cve.now/CVE-2026-83392.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). (CVSS 3.1, Oracle Applications Manager) - [CVE-2026-83391](https://cve.now/CVE-2026-83391.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). (CVSS 5.4, Oracle HRMS) - [CVE-2026-83390](https://cve.now/CVE-2026-83390.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). (CVSS 4.2, Oracle Applications Manager) - [CVE-2026-83389](https://cve.now/CVE-2026-83389.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle HRMS) - [CVE-2026-83388](https://cve.now/CVE-2026-83388.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). (CVSS 2.2, Oracle Applications Manager) - [CVE-2026-83387](https://cve.now/CVE-2026-83387.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC). (CVSS 5.9, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-83386](https://cve.now/CVE-2026-83386.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle HRMS) - [CVE-2026-83385](https://cve.now/CVE-2026-83385.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle HRMS) - [CVE-2026-83384](https://cve.now/CVE-2026-83384.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle HRMS) - [CVE-2026-83383](https://cve.now/CVE-2026-83383.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle HRMS) - [CVE-2026-83382](https://cve.now/CVE-2026-83382.md): Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). (CVSS 4.3, Oracle Report Manager) - [CVE-2026-83381](https://cve.now/CVE-2026-83381.md): Vulnerability in Oracle Java SE (component: Security). (CVSS 4.8, Oracle Java SE) - [CVE-2026-83380](https://cve.now/CVE-2026-83380.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS). (CVSS 5.3, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-83379](https://cve.now/CVE-2026-83379.md): Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for (CVSS 8.7, Oracle Weblogic Server Proxy Plug-in) - [CVE-2026-83378](https://cve.now/CVE-2026-83378.md): Vulnerability in Oracle Java SE (component: Compiler). (CVSS 4.8, Oracle Java SE) - [CVE-2026-83377](https://cve.now/CVE-2026-83377.md): Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Mobile Applications). (CVSS 5.4, Oracle HRMS) - [CVE-2026-83376](https://cve.now/CVE-2026-83376.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (CVSS 3.7, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-83375](https://cve.now/CVE-2026-83375.md): Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce). (CVSS 6.0, Oracle PeopleSoft Enterprise HCM Human Resources) - [CVE-2026-83374](https://cve.now/CVE-2026-83374.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit (CVSS 5.9, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-83373](https://cve.now/CVE-2026-83373.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 3.0, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-83372](https://cve.now/CVE-2026-83372.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 5.4, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-83371](https://cve.now/CVE-2026-83371.md): Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle HRMS) - [CVE-2026-83370](https://cve.now/CVE-2026-83370.md): Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). (CVSS 7.5, Oracle Sourcing) - [CVE-2026-83367](https://cve.now/CVE-2026-83367.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). (CVSS 7.4, Oracle Shipping Execution) - [CVE-2026-83366](https://cve.now/CVE-2026-83366.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). (CVSS 7.4, Oracle Shipping Execution) - [CVE-2026-83363](https://cve.now/CVE-2026-83363.md): Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). (CVSS 8.8, Oracle Contract Lifecycle Management for Public Sector) - [CVE-2026-83361](https://cve.now/CVE-2026-83361.md): Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). (CVSS 8.1, Oracle Contract Lifecycle Management for Public Sector) - [CVE-2026-83360](https://cve.now/CVE-2026-83360.md): Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). (CVSS 6.5, Oracle HRMS) - [CVE-2026-83359](https://cve.now/CVE-2026-83359.md): Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). (CVSS 6.5, Oracle HRMS) - [CVE-2026-83358](https://cve.now/CVE-2026-83358.md): Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle HRMS) - [CVE-2026-83139](https://cve.now/CVE-2026-83139.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 6.5, Oracle Order Management) - [CVE-2026-73964](https://cve.now/CVE-2026-73964.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 2.7, Oracle Database Server) - [CVE-2026-70869](https://cve.now/CVE-2026-70869.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). (CVSS 4.7, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-70860](https://cve.now/CVE-2026-70860.md): Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). (CVSS 5.9, Oracle PeopleSoft Enterprise FIN Common Objects Argentina) - [CVE-2026-60968](https://cve.now/CVE-2026-60968.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). (CVSS 6.0, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60964](https://cve.now/CVE-2026-60964.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). (CVSS 1.9, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60887](https://cve.now/CVE-2026-60887.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). (CVSS 3.8, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60885](https://cve.now/CVE-2026-60885.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). (CVSS 6.8, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60882](https://cve.now/CVE-2026-60882.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). (CVSS 5.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60881](https://cve.now/CVE-2026-60881.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Meta Data). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60878](https://cve.now/CVE-2026-60878.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). (CVSS 4.4, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60876](https://cve.now/CVE-2026-60876.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). (CVSS 4.2, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60874](https://cve.now/CVE-2026-60874.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 4.2, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60869](https://cve.now/CVE-2026-60869.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets). (CVSS 6.8, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60839](https://cve.now/CVE-2026-60839.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). (CVSS 5.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60819](https://cve.now/CVE-2026-60819.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). (CVSS 3.7, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60814](https://cve.now/CVE-2026-60814.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 3.9, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60809](https://cve.now/CVE-2026-60809.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). (CVSS 4.2, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60746](https://cve.now/CVE-2026-60746.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 5.9, Oracle Order Management) - [CVE-2026-60745](https://cve.now/CVE-2026-60745.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). (CVSS 4.4, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60743](https://cve.now/CVE-2026-60743.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60662](https://cve.now/CVE-2026-60662.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). (CVSS 7.8, Oracle Solaris) - [CVE-2026-60500](https://cve.now/CVE-2026-60500.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). (CVSS 5.8, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-60453](https://cve.now/CVE-2026-60453.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). (CVSS 5.3, Oracle Solaris) - [CVE-2026-60432](https://cve.now/CVE-2026-60432.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). (CVSS 9.8, Oracle Solaris) - [CVE-2026-47025](https://cve.now/CVE-2026-47025.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 8.8, Oracle Solaris) - [CVE-2026-101857](https://cve.now/CVE-2026-101857.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 6.5, Oracle Order Management) - [CVE-2026-101856](https://cve.now/CVE-2026-101856.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 6.5, Oracle Order Management) - [CVE-2026-101855](https://cve.now/CVE-2026-101855.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Product Hub) - [CVE-2026-101854](https://cve.now/CVE-2026-101854.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Product Hub) - [CVE-2026-101853](https://cve.now/CVE-2026-101853.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Product Hub) - [CVE-2026-101852](https://cve.now/CVE-2026-101852.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Product Hub) - [CVE-2026-101851](https://cve.now/CVE-2026-101851.md): Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI). (CVSS 7.1, Oracle Installed Base) - [CVE-2026-101850](https://cve.now/CVE-2026-101850.md): Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). (CVSS 6.1, Oracle Installed Base) - [CVE-2026-101849](https://cve.now/CVE-2026-101849.md): Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). (CVSS 7.6, Oracle Installed Base) - [CVE-2026-101847](https://cve.now/CVE-2026-101847.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Bills of Material) - [CVE-2026-101846](https://cve.now/CVE-2026-101846.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.5, Oracle Purchasing) - [CVE-2026-101845](https://cve.now/CVE-2026-101845.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 3.1, Oracle Purchasing) - [CVE-2026-101844](https://cve.now/CVE-2026-101844.md): Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests). (CVSS 3.1, Oracle Concurrent Processing) - [CVE-2026-101843](https://cve.now/CVE-2026-101843.md): Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). (CVSS 4.5, Oracle Production Scheduling) - [CVE-2026-101842](https://cve.now/CVE-2026-101842.md): Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO). (CVSS 8.8, Oracle Strategic Network Optimization) - [CVE-2026-101841](https://cve.now/CVE-2026-101841.md): Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). (CVSS 8.2, Oracle Global Order Promising) - [CVE-2026-101840](https://cve.now/CVE-2026-101840.md): Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). (CVSS 7.2, Oracle Contract Lifecycle Management for Public Sector) - [CVE-2026-101837](https://cve.now/CVE-2026-101837.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). (CVSS 7.7, Oracle Shipping Execution) - [CVE-2026-101836](https://cve.now/CVE-2026-101836.md): Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle iSupplier Portal) - [CVE-2026-101835](https://cve.now/CVE-2026-101835.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). (CVSS 7.5, Oracle Shipping Execution) - [CVE-2026-101834](https://cve.now/CVE-2026-101834.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). (CVSS 8.1, Oracle Shipping Execution) - [CVE-2026-101833](https://cve.now/CVE-2026-101833.md): Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Shipping Execution) - [CVE-2026-101832](https://cve.now/CVE-2026-101832.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 6.5, Oracle Order Management) - [CVE-2026-101831](https://cve.now/CVE-2026-101831.md): Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Quality) - [CVE-2026-108518](https://cve.now/CVE-2026-108518.md): DBI versions before 1.656 for Perl crash via type confusion in dbi\_profile when a database handle is destroyed under a Profile Path with… (CVSS 2.9, DBI) - [CVE-2026-101830](https://cve.now/CVE-2026-101830.md): Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Project Contracts) - [CVE-2026-101829](https://cve.now/CVE-2026-101829.md): Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). (CVSS 7.4, Oracle Mobile Application Server) - [CVE-2026-101828](https://cve.now/CVE-2026-101828.md): Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). (CVSS 6.5, Oracle Mobile Application Server) - [CVE-2026-101827](https://cve.now/CVE-2026-101827.md): Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle HCM Common Architecture) - [CVE-2026-101826](https://cve.now/CVE-2026-101826.md): Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle HCM Common Architecture) - [CVE-2026-101825](https://cve.now/CVE-2026-101825.md): Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle HCM Common Architecture) - [CVE-2026-101824](https://cve.now/CVE-2026-101824.md): Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). (CVSS 8.7, Oracle Document Management and Collaboration) - [CVE-2026-101823](https://cve.now/CVE-2026-101823.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Bills of Material) - [CVE-2026-101822](https://cve.now/CVE-2026-101822.md): Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Bills of Material) - [CVE-2026-101821](https://cve.now/CVE-2026-101821.md): Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Statement). (CVSS 5.4, Oracle Compensation Workbench) - [CVE-2026-101820](https://cve.now/CVE-2026-101820.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN). (CVSS 7.5, Oracle General Ledger) - [CVE-2026-101819](https://cve.now/CVE-2026-101819.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle General Ledger) - [CVE-2026-101818](https://cve.now/CVE-2026-101818.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). (CVSS 7.7, Oracle Product Hub) - [CVE-2026-101816](https://cve.now/CVE-2026-101816.md): Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.2, Oracle Product Hub) - [CVE-2026-101815](https://cve.now/CVE-2026-101815.md): Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Assets) - [CVE-2026-101814](https://cve.now/CVE-2026-101814.md): Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). (CVSS 5.3, Oracle Engineering) - [CVE-2026-101813](https://cve.now/CVE-2026-101813.md): Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). (CVSS 8.8, Oracle Engineering) - [CVE-2026-101812](https://cve.now/CVE-2026-101812.md): Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV). (CVSS 6.8, Oracle Complex Maintenance, Repair and Overhaul) - [CVE-2026-101810](https://cve.now/CVE-2026-101810.md): Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). (CVSS 7.5, Oracle MySQL Router) - [CVE-2026-101809](https://cve.now/CVE-2026-101809.md): Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 10.0, Oracle Workflow) - [CVE-2026-101808](https://cve.now/CVE-2026-101808.md): Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). (CVSS 9.1, Oracle Product Workbench) - [CVE-2026-101807](https://cve.now/CVE-2026-101807.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). (CVSS 4.8, Oracle Communications Billing and Revenue Management) - [CVE-2026-101806](https://cve.now/CVE-2026-101806.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). (CVSS 6.8, Oracle MySQL Connectors) - [CVE-2026-101805](https://cve.now/CVE-2026-101805.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). (CVSS 3.3, Oracle Applications Manager) - [CVE-2026-101804](https://cve.now/CVE-2026-101804.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). (CVSS 2.5, Oracle MySQL Connectors) - [CVE-2026-101803](https://cve.now/CVE-2026-101803.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101802](https://cve.now/CVE-2026-101802.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101801](https://cve.now/CVE-2026-101801.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101800](https://cve.now/CVE-2026-101800.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 6.8, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101799](https://cve.now/CVE-2026-101799.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101798](https://cve.now/CVE-2026-101798.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101797](https://cve.now/CVE-2026-101797.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). (CVSS 7.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101796](https://cve.now/CVE-2026-101796.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 7.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101795](https://cve.now/CVE-2026-101795.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). (CVSS 6.7, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101794](https://cve.now/CVE-2026-101794.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101793](https://cve.now/CVE-2026-101793.md): Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Core). (CVSS 5.5, Oracle Communications BRM - Elastic Charging Engine) - [CVE-2026-101792](https://cve.now/CVE-2026-101792.md): Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). (CVSS 5.9, Oracle Communications BRM - Elastic Charging Engine) - [CVE-2026-101791](https://cve.now/CVE-2026-101791.md): Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). (CVSS 8.1, Oracle Communications BRM - Elastic Charging Engine) - [CVE-2026-101790](https://cve.now/CVE-2026-101790.md): Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). (CVSS 3.3, Oracle Communications BRM - Elastic Charging Engine) - [CVE-2026-101789](https://cve.now/CVE-2026-101789.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101788](https://cve.now/CVE-2026-101788.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). (CVSS 5.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101787](https://cve.now/CVE-2026-101787.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101786](https://cve.now/CVE-2026-101786.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 7.2, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101785](https://cve.now/CVE-2026-101785.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). (CVSS 8.3, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101784](https://cve.now/CVE-2026-101784.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101783](https://cve.now/CVE-2026-101783.md): Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). (CVSS 7.4, Oracle MySQL Router) - [CVE-2026-101782](https://cve.now/CVE-2026-101782.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). (CVSS 6.5, Oracle Applications Manager) - [CVE-2026-101781](https://cve.now/CVE-2026-101781.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). (CVSS 8.8, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101780](https://cve.now/CVE-2026-101780.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101779](https://cve.now/CVE-2026-101779.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry). (CVSS 2.7, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101778](https://cve.now/CVE-2026-101778.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101777](https://cve.now/CVE-2026-101777.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 5.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101776](https://cve.now/CVE-2026-101776.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101775](https://cve.now/CVE-2026-101775.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 7.4, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101774](https://cve.now/CVE-2026-101774.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101773](https://cve.now/CVE-2026-101773.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 7.1, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101772](https://cve.now/CVE-2026-101772.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). (CVSS 8.1, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101771](https://cve.now/CVE-2026-101771.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). (CVSS 8.1, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101770](https://cve.now/CVE-2026-101770.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). (CVSS 8.1, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101769](https://cve.now/CVE-2026-101769.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 7.0, Oracle MySQL Cluster) - [CVE-2026-101768](https://cve.now/CVE-2026-101768.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 8.1, Oracle MySQL Connectors) - [CVE-2026-101767](https://cve.now/CVE-2026-101767.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 9.8, Oracle Application Object Library) - [CVE-2026-101766](https://cve.now/CVE-2026-101766.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101765](https://cve.now/CVE-2026-101765.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). (CVSS 9.1, Oracle Communications Billing and Revenue Management) - [CVE-2026-101764](https://cve.now/CVE-2026-101764.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). (CVSS 5.5, Oracle Communications Billing and Revenue Management) - [CVE-2026-101763](https://cve.now/CVE-2026-101763.md): Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deploymen (CVSS 9.8, Oracle Communications BRM - Elastic Charging Engine) - [CVE-2026-101762](https://cve.now/CVE-2026-101762.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 5.3, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101761](https://cve.now/CVE-2026-101761.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 5.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101760](https://cve.now/CVE-2026-101760.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101759](https://cve.now/CVE-2026-101759.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). (CVSS 7.5, Oracle Communications Billing and Revenue Management) - [CVE-2026-101758](https://cve.now/CVE-2026-101758.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). (CVSS 8.2, Oracle Communications Billing and Revenue Management) - [CVE-2026-101757](https://cve.now/CVE-2026-101757.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). (CVSS 7.8, Oracle Application Object Library) - [CVE-2026-101756](https://cve.now/CVE-2026-101756.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101755](https://cve.now/CVE-2026-101755.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). (CVSS 5.3, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101754](https://cve.now/CVE-2026-101754.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101753](https://cve.now/CVE-2026-101753.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101752](https://cve.now/CVE-2026-101752.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101751](https://cve.now/CVE-2026-101751.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101750](https://cve.now/CVE-2026-101750.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101749](https://cve.now/CVE-2026-101749.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101748](https://cve.now/CVE-2026-101748.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101747](https://cve.now/CVE-2026-101747.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101746](https://cve.now/CVE-2026-101746.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). (CVSS 7.3, Oracle Agile Engineering Data Management) - [CVE-2026-101745](https://cve.now/CVE-2026-101745.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 5.3, Oracle Agile Engineering Data Management) - [CVE-2026-101744](https://cve.now/CVE-2026-101744.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 8.4, Oracle Agile Engineering Data Management) - [CVE-2026-101743](https://cve.now/CVE-2026-101743.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101742](https://cve.now/CVE-2026-101742.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). (CVSS 8.8, Oracle Applications Manager) - [CVE-2026-101741](https://cve.now/CVE-2026-101741.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 5.3, Oracle Agile Engineering Data Management) - [CVE-2026-101740](https://cve.now/CVE-2026-101740.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 3.6, Oracle Agile Engineering Data Management) - [CVE-2026-101739](https://cve.now/CVE-2026-101739.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 7.0, Oracle Agile Engineering Data Management) - [CVE-2026-101738](https://cve.now/CVE-2026-101738.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 3.1, Oracle Agile Engineering Data Management) - [CVE-2026-101737](https://cve.now/CVE-2026-101737.md): Vulnerability in Oracle Java SE (component: Compiler). (CVSS 5.9, Oracle Java SE) - [CVE-2026-101736](https://cve.now/CVE-2026-101736.md): Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). (CVSS 7.4, Oracle Primavera Unifier) - [CVE-2026-101735](https://cve.now/CVE-2026-101735.md): Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control). (CVSS 7.1, Oracle Primavera Unifier) - [CVE-2026-101734](https://cve.now/CVE-2026-101734.md): Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface (CVSS 4.3, Oracle Agile Engineering Data Management) - [CVE-2026-101733](https://cve.now/CVE-2026-101733.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101732](https://cve.now/CVE-2026-101732.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101731](https://cve.now/CVE-2026-101731.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101730](https://cve.now/CVE-2026-101730.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101729](https://cve.now/CVE-2026-101729.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101728](https://cve.now/CVE-2026-101728.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101727](https://cve.now/CVE-2026-101727.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101726](https://cve.now/CVE-2026-101726.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101725](https://cve.now/CVE-2026-101725.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101724](https://cve.now/CVE-2026-101724.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101723](https://cve.now/CVE-2026-101723.md): Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). (CVSS 6.7, Oracle Agile PLM MCAD Connector) - [CVE-2026-101722](https://cve.now/CVE-2026-101722.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). (CVSS 4.3, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101721](https://cve.now/CVE-2026-101721.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101720](https://cve.now/CVE-2026-101720.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). (CVSS 5.3, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101719](https://cve.now/CVE-2026-101719.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). (CVSS 7.5, Oracle Agile PLM) - [CVE-2026-101718](https://cve.now/CVE-2026-101718.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). (CVSS 6.5, Oracle Agile PLM) - [CVE-2026-101717](https://cve.now/CVE-2026-101717.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 6.4, Oracle Agile PLM) - [CVE-2026-101716](https://cve.now/CVE-2026-101716.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). (CVSS 5.3, Oracle Agile PLM) - [CVE-2026-101715](https://cve.now/CVE-2026-101715.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). (CVSS 6.5, Oracle Agile PLM) - [CVE-2026-101714](https://cve.now/CVE-2026-101714.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). (CVSS 6.1, Oracle Agile PLM) - [CVE-2026-101713](https://cve.now/CVE-2026-101713.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). (CVSS 5.4, Oracle Agile PLM) - [CVE-2026-101712](https://cve.now/CVE-2026-101712.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Payroll) - [CVE-2026-101711](https://cve.now/CVE-2026-101711.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). (CVSS 6.6, Oracle Payroll) - [CVE-2026-101710](https://cve.now/CVE-2026-101710.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.8, Oracle Payroll) - [CVE-2026-101709](https://cve.now/CVE-2026-101709.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Payroll) - [CVE-2026-101708](https://cve.now/CVE-2026-101708.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Payroll) - [CVE-2026-101707](https://cve.now/CVE-2026-101707.md): Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). (CVSS 7.4, Oracle Concurrent Processing) - [CVE-2026-101706](https://cve.now/CVE-2026-101706.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). (CVSS 6.5, Oracle One-to-One Fulfillment) - [CVE-2026-101705](https://cve.now/CVE-2026-101705.md): Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). (CVSS 7.7, Oracle Common Applications) - [CVE-2026-101704](https://cve.now/CVE-2026-101704.md): Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). (CVSS 8.2, Oracle Concurrent Processing) - [CVE-2026-101703](https://cve.now/CVE-2026-101703.md): Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Pasta) - [CVE-2026-101701](https://cve.now/CVE-2026-101701.md): Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). (CVSS 6.0, Oracle Concurrent Processing) - [CVE-2026-101700](https://cve.now/CVE-2026-101700.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 8.1, Oracle Application Object Library) - [CVE-2026-101699](https://cve.now/CVE-2026-101699.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). (CVSS 7.5, Oracle One-to-One Fulfillment) - [CVE-2026-101698](https://cve.now/CVE-2026-101698.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). (CVSS 7.5, Oracle One-to-One Fulfillment) - [CVE-2026-101697](https://cve.now/CVE-2026-101697.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI). (CVSS 6.1, Oracle One-to-One Fulfillment) - [CVE-2026-101696](https://cve.now/CVE-2026-101696.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). (CVSS 6.8, Oracle Application Object Library) - [CVE-2026-101695](https://cve.now/CVE-2026-101695.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). (CVSS 6.8, Oracle One-to-One Fulfillment) - [CVE-2026-101694](https://cve.now/CVE-2026-101694.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). (CVSS 7.2, Oracle Mobile Field Service) - [CVE-2026-101692](https://cve.now/CVE-2026-101692.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). (CVSS 8.8, Oracle Mobile Field Service) - [CVE-2026-101690](https://cve.now/CVE-2026-101690.md): Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). (CVSS 8.2, Oracle E-Business Suite Integrated SOA Gateway) - [CVE-2026-101689](https://cve.now/CVE-2026-101689.md): Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). (CVSS 7.7, Oracle E-Business Suite Integrated SOA Gateway) - [CVE-2026-101688](https://cve.now/CVE-2026-101688.md): Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). (CVSS 8.6, Oracle E-Business Suite Integrated SOA Gateway) - [CVE-2026-101687](https://cve.now/CVE-2026-101687.md): Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). (CVSS 7.5, Oracle E-Business Suite Integrated SOA Gateway) - [CVE-2026-101686](https://cve.now/CVE-2026-101686.md): Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). (CVSS 8.8, Oracle E-Business Suite Integrated SOA Gateway) - [CVE-2026-101685](https://cve.now/CVE-2026-101685.md): Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). (CVSS 8.8, Oracle E-Business Suite Integrated SOA Gateway) - [CVE-2026-101684](https://cve.now/CVE-2026-101684.md): Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.3, Oracle E-Business Suite Integrated SOA Gateway) - [CVE-2026-101683](https://cve.now/CVE-2026-101683.md): Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). (CVSS 7.0, Oracle Applications DBA) - [CVE-2026-101682](https://cve.now/CVE-2026-101682.md): Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). (CVSS 7.8, Oracle Applications DBA) - [CVE-2026-101681](https://cve.now/CVE-2026-101681.md): Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). (CVSS 7.0, Oracle Applications DBA) - [CVE-2026-101680](https://cve.now/CVE-2026-101680.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). (CVSS 7.4, Oracle Communications Billing and Revenue Management) - [CVE-2026-101679](https://cve.now/CVE-2026-101679.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). (CVSS 7.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101678](https://cve.now/CVE-2026-101678.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 4.3, Oracle MySQL Connectors) - [CVE-2026-101677](https://cve.now/CVE-2026-101677.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 4.3, Oracle MySQL Connectors) - [CVE-2026-101676](https://cve.now/CVE-2026-101676.md): Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). (CVSS 7.8, Oracle Concurrent Processing) - [CVE-2026-101675](https://cve.now/CVE-2026-101675.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.7, Oracle Mobile Field Service) - [CVE-2026-101674](https://cve.now/CVE-2026-101674.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.7, Oracle Mobile Field Service) - [CVE-2026-101673](https://cve.now/CVE-2026-101673.md): Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle US Federal Human Resources) - [CVE-2026-101672](https://cve.now/CVE-2026-101672.md): Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.1, Oracle Call Center Technology) - [CVE-2026-101671](https://cve.now/CVE-2026-101671.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). (CVSS 6.1, Oracle Email Center) - [CVE-2026-101670](https://cve.now/CVE-2026-101670.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). (CVSS 6.5, Oracle Email Center) - [CVE-2026-101669](https://cve.now/CVE-2026-101669.md): Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). (CVSS 6.8, Oracle Public Sector Human Resources) - [CVE-2026-101668](https://cve.now/CVE-2026-101668.md): Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.1, Oracle Customer Care) - [CVE-2026-101667](https://cve.now/CVE-2026-101667.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). (CVSS 5.4, Oracle Trade Management) - [CVE-2026-101666](https://cve.now/CVE-2026-101666.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). (CVSS 5.4, Oracle Trade Management) - [CVE-2026-101665](https://cve.now/CVE-2026-101665.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). (CVSS 8.1, Oracle Mobile Field Service) - [CVE-2026-101664](https://cve.now/CVE-2026-101664.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Mobile Field Service) - [CVE-2026-101662](https://cve.now/CVE-2026-101662.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). (CVSS 7.1, Oracle Mobile Field Service) - [CVE-2026-101661](https://cve.now/CVE-2026-101661.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). (CVSS 7.4, Oracle Mobile Field Service) - [CVE-2026-101660](https://cve.now/CVE-2026-101660.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). (CVSS 7.5, Oracle Mobile Field Service) - [CVE-2026-101658](https://cve.now/CVE-2026-101658.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). (CVSS 7.4, Oracle Mobile Field Service) - [CVE-2026-101656](https://cve.now/CVE-2026-101656.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Mobile Field Service) - [CVE-2026-101655](https://cve.now/CVE-2026-101655.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Mobile Field Service) - [CVE-2026-101654](https://cve.now/CVE-2026-101654.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Mobile Field Service) - [CVE-2026-101653](https://cve.now/CVE-2026-101653.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Mobile Field Service) - [CVE-2026-101651](https://cve.now/CVE-2026-101651.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Partner Management) - [CVE-2026-101650](https://cve.now/CVE-2026-101650.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Partner Management) - [CVE-2026-101649](https://cve.now/CVE-2026-101649.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Partner Management) - [CVE-2026-101648](https://cve.now/CVE-2026-101648.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.4, Oracle Partner Management) - [CVE-2026-101647](https://cve.now/CVE-2026-101647.md): Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). (CVSS 7.5, Oracle iSetup) - [CVE-2026-101646](https://cve.now/CVE-2026-101646.md): Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). (CVSS 7.2, Oracle iSetup) - [CVE-2026-101645](https://cve.now/CVE-2026-101645.md): Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). (CVSS 7.5, Oracle iSetup) - [CVE-2026-101644](https://cve.now/CVE-2026-101644.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.6, Oracle Mobile Field Service) - [CVE-2026-101643](https://cve.now/CVE-2026-101643.md): Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Sales Online) - [CVE-2026-101642](https://cve.now/CVE-2026-101642.md): Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.1, Oracle Report Manager) - [CVE-2026-101641](https://cve.now/CVE-2026-101641.md): Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Report Manager) - [CVE-2026-101640](https://cve.now/CVE-2026-101640.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). (CVSS 8.2, Oracle Marketing) - [CVE-2026-101639](https://cve.now/CVE-2026-101639.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). (CVSS 5.4, Oracle Marketing) - [CVE-2026-101638](https://cve.now/CVE-2026-101638.md): Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). (CVSS 7.3, Oracle Applications DBA) - [CVE-2026-101637](https://cve.now/CVE-2026-101637.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 5.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101636](https://cve.now/CVE-2026-101636.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). (CVSS 7.4, Oracle Mobile Field Service) - [CVE-2026-101635](https://cve.now/CVE-2026-101635.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Mobile Field Service) - [CVE-2026-101634](https://cve.now/CVE-2026-101634.md): Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). (CVSS 9.1, Oracle Mobile Field Service) - [CVE-2026-101633](https://cve.now/CVE-2026-101633.md): Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). (CVSS 4.3, Oracle MySQL Router) - [CVE-2026-101632](https://cve.now/CVE-2026-101632.md): Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). (CVSS 4.3, Oracle MySQL Router) - [CVE-2026-101631](https://cve.now/CVE-2026-101631.md): Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). (CVSS 6.8, Oracle MySQL Router) - [CVE-2026-101630](https://cve.now/CVE-2026-101630.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). (CVSS 5.4, Oracle Advanced Outbound Telephony) - [CVE-2026-101629](https://cve.now/CVE-2026-101629.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101628](https://cve.now/CVE-2026-101628.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). (CVSS 6.5, Oracle MySQL Cluster) - [CVE-2026-101627](https://cve.now/CVE-2026-101627.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101626](https://cve.now/CVE-2026-101626.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). (CVSS 5.9, Oracle MySQL Connectors) - [CVE-2026-101625](https://cve.now/CVE-2026-101625.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). (CVSS 4.3, Oracle MySQL Connectors) - [CVE-2026-101624](https://cve.now/CVE-2026-101624.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101623](https://cve.now/CVE-2026-101623.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101622](https://cve.now/CVE-2026-101622.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101621](https://cve.now/CVE-2026-101621.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101620](https://cve.now/CVE-2026-101620.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101619](https://cve.now/CVE-2026-101619.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101618](https://cve.now/CVE-2026-101618.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101617](https://cve.now/CVE-2026-101617.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101616](https://cve.now/CVE-2026-101616.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101615](https://cve.now/CVE-2026-101615.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101614](https://cve.now/CVE-2026-101614.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101613](https://cve.now/CVE-2026-101613.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101612](https://cve.now/CVE-2026-101612.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.0, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101611](https://cve.now/CVE-2026-101611.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101610](https://cve.now/CVE-2026-101610.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101609](https://cve.now/CVE-2026-101609.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 4.4, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101608](https://cve.now/CVE-2026-101608.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101607](https://cve.now/CVE-2026-101607.md): Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server · Oracle MySQL Cluster) - [CVE-2026-101606](https://cve.now/CVE-2026-101606.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). (CVSS 6.5, Oracle Communications Billing and Revenue Management) - [CVE-2026-101605](https://cve.now/CVE-2026-101605.md): Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). (CVSS 5.3, Oracle Utilities Network Management System) - [CVE-2026-101604](https://cve.now/CVE-2026-101604.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). (CVSS 7.5, Oracle Communications Unified Inventory Management) - [CVE-2026-101603](https://cve.now/CVE-2026-101603.md): Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). (CVSS 7.5, Oracle Communications Unified Inventory Management) - [CVE-2026-101602](https://cve.now/CVE-2026-101602.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.0, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-101601](https://cve.now/CVE-2026-101601.md): Vulnerability in Oracle GoldenGate (component: Vendor Access Module). (CVSS 5.5, Oracle GoldenGate) - [CVE-2026-101600](https://cve.now/CVE-2026-101600.md): Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). (CVSS 3.6, Oracle TimesTen In-Memory Database) - [CVE-2026-101599](https://cve.now/CVE-2026-101599.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox) - [CVE-2026-101598](https://cve.now/CVE-2026-101598.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox) - [CVE-2026-101597](https://cve.now/CVE-2026-101597.md): Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). (CVSS 5.3, Oracle ZFS Storage Appliance Kit) - [CVE-2026-101596](https://cve.now/CVE-2026-101596.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.8, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-101595](https://cve.now/CVE-2026-101595.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supply Chain Relations (CVSS 5.4, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-101594](https://cve.now/CVE-2026-101594.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.8, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-101593](https://cve.now/CVE-2026-101593.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.3, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-101592](https://cve.now/CVE-2026-101592.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 5.4, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-101591](https://cve.now/CVE-2026-101591.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 4.3, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-101590](https://cve.now/CVE-2026-101590.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). (CVSS 9.1, Oracle Helidon) - [CVE-2026-101589](https://cve.now/CVE-2026-101589.md): Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). (CVSS 5.3, Oracle Utilities Network Management System) - [CVE-2026-101588](https://cve.now/CVE-2026-101588.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). (CVSS 5.3, Oracle Helidon) - [CVE-2026-101587](https://cve.now/CVE-2026-101587.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1). (CVSS 5.3, Oracle Helidon) - [CVE-2026-101586](https://cve.now/CVE-2026-101586.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient). (CVSS 5.3, Oracle Helidon) - [CVE-2026-101585](https://cve.now/CVE-2026-101585.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). (CVSS 7.2, Oracle Helidon) - [CVE-2026-101584](https://cve.now/CVE-2026-101584.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket). (CVSS 6.5, Oracle Helidon) - [CVE-2026-101583](https://cve.now/CVE-2026-101583.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper). (CVSS 7.0, Oracle Helidon) - [CVE-2026-101582](https://cve.now/CVE-2026-101582.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault). (CVSS 5.8, Oracle Helidon) - [CVE-2026-101581](https://cve.now/CVE-2026-101581.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin). (CVSS 6.5, Oracle Helidon) - [CVE-2026-101580](https://cve.now/CVE-2026-101580.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-jwt). (CVSS 5.8, Oracle Helidon) - [CVE-2026-101579](https://cve.now/CVE-2026-101579.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server). (CVSS 7.2, Oracle Helidon) - [CVE-2026-101578](https://cve.now/CVE-2026-101578.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-google-login). (CVSS 5.3, Oracle Helidon) - [CVE-2026-101577](https://cve.now/CVE-2026-101577.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). (CVSS 3.1, Oracle Helidon) - [CVE-2026-101576](https://cve.now/CVE-2026-101576.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). (CVSS 3.7, Oracle Helidon) - [CVE-2026-101575](https://cve.now/CVE-2026-101575.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). (CVSS 6.5, Oracle Helidon) - [CVE-2026-101574](https://cve.now/CVE-2026-101574.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC). (CVSS 6.9, Oracle Helidon) - [CVE-2026-101573](https://cve.now/CVE-2026-101573.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-http-auth). (CVSS 6.8, Oracle Helidon) - [CVE-2026-101572](https://cve.now/CVE-2026-101572.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). (CVSS 7.5, Oracle Helidon) - [CVE-2026-101571](https://cve.now/CVE-2026-101571.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). (CVSS 5.6, Oracle Helidon) - [CVE-2026-101570](https://cve.now/CVE-2026-101570.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). (CVSS 3.7, Oracle Helidon) - [CVE-2026-101569](https://cve.now/CVE-2026-101569.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits). (CVSS 6.5, Oracle Helidon) - [CVE-2026-101568](https://cve.now/CVE-2026-101568.md): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health). (CVSS 5.3, Oracle Helidon) - [CVE-2026-101567](https://cve.now/CVE-2026-101567.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). (CVSS 8.8, Oracle Cost Management) - [CVE-2026-101566](https://cve.now/CVE-2026-101566.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). (CVSS 7.8, Oracle Application Object Library) - [CVE-2026-101565](https://cve.now/CVE-2026-101565.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Import). (CVSS 6.2, Oracle Agile PLM) - [CVE-2026-101564](https://cve.now/CVE-2026-101564.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). (CVSS 5.9, Oracle Agile PLM) - [CVE-2026-101562](https://cve.now/CVE-2026-101562.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). (CVSS 7.5, Oracle Agile PLM) - [CVE-2026-101560](https://cve.now/CVE-2026-101560.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Commerce Server). (CVSS 7.1, Oracle Commerce Platform) - [CVE-2026-101559](https://cve.now/CVE-2026-101559.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: PO View Document). (CVSS 6.5, Oracle Purchasing) - [CVE-2026-101558](https://cve.now/CVE-2026-101558.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals). (CVSS 6.1, Oracle Purchasing) - [CVE-2026-101557](https://cve.now/CVE-2026-101557.md): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Purchasing) - [CVE-2026-101556](https://cve.now/CVE-2026-101556.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Payroll) - [CVE-2026-101555](https://cve.now/CVE-2026-101555.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Payroll) - [CVE-2026-101554](https://cve.now/CVE-2026-101554.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Payroll) - [CVE-2026-101553](https://cve.now/CVE-2026-101553.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Element Types, Links, Entries). (CVSS 6.5, Oracle Payroll) - [CVE-2026-101552](https://cve.now/CVE-2026-101552.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields). (CVSS 7.5, Oracle Application Object Library) - [CVE-2026-101551](https://cve.now/CVE-2026-101551.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). (CVSS 7.5, Oracle Applications Manager) - [CVE-2026-101549](https://cve.now/CVE-2026-101549.md): Vulnerability in Oracle Application Testing Suite (component: OpenScript). (CVSS 7.8, Oracle Application Testing Suite) - [CVE-2026-101548](https://cve.now/CVE-2026-101548.md): Vulnerability in Oracle Application Testing Suite (component: OpenScript). (CVSS 7.0, Oracle Application Testing Suite) - [CVE-2026-101547](https://cve.now/CVE-2026-101547.md): Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). (CVSS 6.1, Oracle Demand Planning) - [CVE-2026-101546](https://cve.now/CVE-2026-101546.md): Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Materials Requirement Planning) - [CVE-2026-101545](https://cve.now/CVE-2026-101545.md): Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.0, Oracle Inventory Management) - [CVE-2026-101544](https://cve.now/CVE-2026-101544.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.0, Oracle Payroll) - [CVE-2026-101543](https://cve.now/CVE-2026-101543.md): Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.5, Oracle Capacity) - [CVE-2026-101542](https://cve.now/CVE-2026-101542.md): Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Capacity) - [CVE-2026-101541](https://cve.now/CVE-2026-101541.md): Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Capacity) - [CVE-2026-101540](https://cve.now/CVE-2026-101540.md): Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.7, Oracle Capacity) - [CVE-2026-101539](https://cve.now/CVE-2026-101539.md): Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). (CVSS 6.5, Oracle Payroll) - [CVE-2026-101538](https://cve.now/CVE-2026-101538.md): Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). (CVSS 6.5, Oracle Order Management) - [CVE-2026-101537](https://cve.now/CVE-2026-101537.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 9.8, Oracle Solaris) - [CVE-2026-101536](https://cve.now/CVE-2026-101536.md): Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). (CVSS 7.5, Oracle Cost Management) - [CVE-2026-101535](https://cve.now/CVE-2026-101535.md): Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). (CVSS 7.5, Oracle Sales Foundation) - [CVE-2026-101534](https://cve.now/CVE-2026-101534.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). (CVSS 8.5, Oracle EDI Gateway) - [CVE-2026-101533](https://cve.now/CVE-2026-101533.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). (CVSS 6.6, Oracle EDI Gateway) - [CVE-2026-101532](https://cve.now/CVE-2026-101532.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). (CVSS 7.2, Oracle EDI Gateway) - [CVE-2026-101531](https://cve.now/CVE-2026-101531.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). (CVSS 7.5, Oracle Business Intelligence Enterprise Edition) - [CVE-2026-101529](https://cve.now/CVE-2026-101529.md): Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). (CVSS 9.9, Oracle Enterprise Manager for Oracle Database) - [CVE-2026-101528](https://cve.now/CVE-2026-101528.md): Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). (CVSS 9.9, Oracle Enterprise Manager for Oracle Database) - [CVE-2026-101527](https://cve.now/CVE-2026-101527.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). (CVSS 7.8, Oracle Enterprise Manager Base Platform) - [CVE-2026-101526](https://cve.now/CVE-2026-101526.md): Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). (CVSS 8.8, Oracle Enterprise Manager for Siebel) - [CVE-2026-101525](https://cve.now/CVE-2026-101525.md): Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). (CVSS 8.8, Oracle Enterprise Manager for Siebel) - [CVE-2026-101524](https://cve.now/CVE-2026-101524.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). (CVSS 5.6, Oracle Enterprise Manager Base Platform) - [CVE-2026-101522](https://cve.now/CVE-2026-101522.md): Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). (CVSS 5.5, Oracle TimesTen In-Memory Database) - [CVE-2026-101521](https://cve.now/CVE-2026-101521.md): Vulnerability in Oracle APEX (component: General). (CVSS 9.8, Oracle APEX) - [CVE-2026-101520](https://cve.now/CVE-2026-101520.md): Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Instal (CVSS 7.5, Oracle Global Lifecycle Management NextGen OUI Framework) - [CVE-2026-101519](https://cve.now/CVE-2026-101519.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). (CVSS 7.2, Oracle EDI Gateway) - [CVE-2026-101518](https://cve.now/CVE-2026-101518.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). (CVSS 8.8, Oracle Enterprise Manager Base Platform) - [CVE-2026-101517](https://cve.now/CVE-2026-101517.md): Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). (CVSS 5.5, Oracle Utilities Network Management System) - [CVE-2026-101516](https://cve.now/CVE-2026-101516.md): Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librari (CVSS 6.5, Oracle Java SE · Oracle GraalVM for JDK +1) - [CVE-2026-101515](https://cve.now/CVE-2026-101515.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). (CVSS 5.9, Oracle WebLogic Server) - [CVE-2026-101513](https://cve.now/CVE-2026-101513.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB). (CVSS 3.8, Oracle MySQL Cluster) - [CVE-2026-101512](https://cve.now/CVE-2026-101512.md): Vulnerability in the RDBMS component of Oracle Database Server. (CVSS 6.5, Oracle Database Server) - [CVE-2026-101511](https://cve.now/CVE-2026-101511.md): Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). (CVSS 4.3, Oracle Enterprise Manager Base Platform) - [CVE-2026-101510](https://cve.now/CVE-2026-101510.md): Vulnerability in the Oracle Net Services component of Oracle Database Server. (CVSS 4.4, Oracle Net Services) - [CVE-2026-101508](https://cve.now/CVE-2026-101508.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). (CVSS 7.5, Oracle Siebel CRM Integration) - [CVE-2026-101507](https://cve.now/CVE-2026-101507.md): Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). (CVSS 6.5, Oracle Trusted Answer Search) - [CVE-2026-101506](https://cve.now/CVE-2026-101506.md): Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). (CVSS 7.7, Oracle Trusted Answer Search) - [CVE-2026-101505](https://cve.now/CVE-2026-101505.md): Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). (CVSS 8.7, Oracle Trusted Answer Search) - [CVE-2026-101504](https://cve.now/CVE-2026-101504.md): Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). (CVSS 7.6, Oracle Trusted Answer Search) - [CVE-2026-101503](https://cve.now/CVE-2026-101503.md): Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). (CVSS 9.9, Oracle Trusted Answer Search) - [CVE-2026-101502](https://cve.now/CVE-2026-101502.md): Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). (CVSS 5.0, Oracle Trusted Answer Search) - [CVE-2026-101501](https://cve.now/CVE-2026-101501.md): Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). (CVSS 9.9, Oracle Trusted Answer Search) - [CVE-2026-101500](https://cve.now/CVE-2026-101500.md): Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extens (CVSS 6.5, Oracle Global Lifecycle Management OPatchAuto) - [CVE-2026-101499](https://cve.now/CVE-2026-101499.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). (CVSS 9.8, Oracle WebCenter Sites) - [CVE-2026-101498](https://cve.now/CVE-2026-101498.md): Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). (CVSS 8.1, Oracle Trusted Answer Search) - [CVE-2026-101497](https://cve.now/CVE-2026-101497.md): Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework). (CVSS 4.3, Oracle Identity Manager) - [CVE-2026-101495](https://cve.now/CVE-2026-101495.md): Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). (CVSS 8.8, Oracle Siebel CRM Development) - [CVE-2026-101494](https://cve.now/CVE-2026-101494.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 7.7, Oracle REST Data Services) - [CVE-2026-101493](https://cve.now/CVE-2026-101493.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 5.4, Oracle REST Data Services) - [CVE-2026-101492](https://cve.now/CVE-2026-101492.md): Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). (CVSS 4.7, Oracle Siebel CRM Integration) - [CVE-2026-101491](https://cve.now/CVE-2026-101491.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). (CVSS 5.0, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101490](https://cve.now/CVE-2026-101490.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). (CVSS 6.1, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101489](https://cve.now/CVE-2026-101489.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 4.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101488](https://cve.now/CVE-2026-101488.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101487](https://cve.now/CVE-2026-101487.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 5.4, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101486](https://cve.now/CVE-2026-101486.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). (CVSS 5.4, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101485](https://cve.now/CVE-2026-101485.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 6.5, Oracle Autonomous Health Framework) - [CVE-2026-101484](https://cve.now/CVE-2026-101484.md): Vulnerability in Oracle Secure Backup (component: Backup and Restore). (CVSS 9.8, Oracle Secure Backup) - [CVE-2026-101483](https://cve.now/CVE-2026-101483.md): Vulnerability in Oracle Secure Backup (component: Device Management and Support). (CVSS 6.5, Oracle Secure Backup) - [CVE-2026-101482](https://cve.now/CVE-2026-101482.md): Vulnerability in Oracle Secure Backup (component: Device Management and Support). (CVSS 7.8, Oracle Secure Backup) - [CVE-2026-101481](https://cve.now/CVE-2026-101481.md): Vulnerability in Oracle Secure Backup (component: Device Management and Support). (CVSS 8.8, Oracle Secure Backup) - [CVE-2026-101480](https://cve.now/CVE-2026-101480.md): Vulnerability in Oracle Secure Backup (component: NDMP daemon). (CVSS 5.3, Oracle Secure Backup) - [CVE-2026-101479](https://cve.now/CVE-2026-101479.md): Vulnerability in Oracle Secure Backup (component: Backup and Restore). (CVSS 8.6, Oracle Secure Backup) - [CVE-2026-101478](https://cve.now/CVE-2026-101478.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 7.8, Oracle Autonomous Health Framework) - [CVE-2026-101477](https://cve.now/CVE-2026-101477.md): Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). (CVSS 7.8, Oracle Autonomous Health Framework) - [CVE-2026-101476](https://cve.now/CVE-2026-101476.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 4.3, Oracle Siebel Apps - Marketing) - [CVE-2026-101475](https://cve.now/CVE-2026-101475.md): Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). (CVSS 6.5, Oracle Primavera Unifier) - [CVE-2026-101474](https://cve.now/CVE-2026-101474.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 5.9, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-101473](https://cve.now/CVE-2026-101473.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Manage (CVSS 8.1, Oracle Agile Product Lifecycle Management for Process) - [CVE-2026-101472](https://cve.now/CVE-2026-101472.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 5.5, Oracle Product Lifecycle Analytics) - [CVE-2026-101471](https://cve.now/CVE-2026-101471.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 6.1, Oracle Product Lifecycle Analytics) - [CVE-2026-101470](https://cve.now/CVE-2026-101470.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 6.0, Oracle Product Lifecycle Analytics) - [CVE-2026-101469](https://cve.now/CVE-2026-101469.md): Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). (CVSS 7.5, Oracle Product Lifecycle Analytics) - [CVE-2026-101468](https://cve.now/CVE-2026-101468.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). (CVSS 7.5, Oracle Siebel CRM Deployment) - [CVE-2026-101467](https://cve.now/CVE-2026-101467.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework). (CVSS 7.4, Oracle Siebel CRM End User) - [CVE-2026-101466](https://cve.now/CVE-2026-101466.md): Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). (CVSS 7.2, Oracle EDI Gateway) - [CVE-2026-101465](https://cve.now/CVE-2026-101465.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.3, Oracle Siebel CRM Deployment) - [CVE-2026-101464](https://cve.now/CVE-2026-101464.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.1, Oracle Siebel CRM Deployment) - [CVE-2026-101463](https://cve.now/CVE-2026-101463.md): Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI). (CVSS 7.5, Oracle Siebel CRM End User) - [CVE-2026-101462](https://cve.now/CVE-2026-101462.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 5.5, Oracle Siebel CRM Deployment) - [CVE-2026-101461](https://cve.now/CVE-2026-101461.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.5, Oracle Siebel CRM Deployment) - [CVE-2026-101460](https://cve.now/CVE-2026-101460.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 7.5, Oracle Siebel CRM Deployment) - [CVE-2026-101459](https://cve.now/CVE-2026-101459.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 8.3, Oracle Siebel CRM Deployment) - [CVE-2026-101458](https://cve.now/CVE-2026-101458.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 8.2, Oracle Siebel CRM Deployment) - [CVE-2026-101457](https://cve.now/CVE-2026-101457.md): Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). (CVSS 8.8, Oracle Siebel Apps - Life Sciences) - [CVE-2026-101456](https://cve.now/CVE-2026-101456.md): Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). (CVSS 6.0, Oracle Siebel CRM Development) - [CVE-2026-101455](https://cve.now/CVE-2026-101455.md): Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). (CVSS 6.3, Oracle Siebel CRM Development) - [CVE-2026-101454](https://cve.now/CVE-2026-101454.md): Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). (CVSS 6.1, Oracle Siebel CRM Development) - [CVE-2026-101453](https://cve.now/CVE-2026-101453.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). (CVSS 6.7, Oracle Siebel CRM Deployment) - [CVE-2026-101452](https://cve.now/CVE-2026-101452.md): Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay). (CVSS 7.8, Oracle Autonomous Health Framework) - [CVE-2026-101451](https://cve.now/CVE-2026-101451.md): Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). (CVSS 8.7, Oracle Siebel Life Sciences) - [CVE-2026-101450](https://cve.now/CVE-2026-101450.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). (CVSS 7.1, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101449](https://cve.now/CVE-2026-101449.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). (CVSS 2.4, Oracle Siebel CRM Deployment) - [CVE-2026-101448](https://cve.now/CVE-2026-101448.md): Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). (CVSS 5.3, Oracle Siebel CRM Deployment) - [CVE-2026-101447](https://cve.now/CVE-2026-101447.md): Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). (CVSS 7.1, Oracle Siebel CRM Development) - [CVE-2026-101446](https://cve.now/CVE-2026-101446.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 9.9, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101445](https://cve.now/CVE-2026-101445.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 3.6, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101444](https://cve.now/CVE-2026-101444.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.5, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101443](https://cve.now/CVE-2026-101443.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 6.5, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101442](https://cve.now/CVE-2026-101442.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 3.1, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101441](https://cve.now/CVE-2026-101441.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.3, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101440](https://cve.now/CVE-2026-101440.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.9, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101439](https://cve.now/CVE-2026-101439.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 5.9, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101438](https://cve.now/CVE-2026-101438.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 8.0, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101437](https://cve.now/CVE-2026-101437.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 6.6, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101436](https://cve.now/CVE-2026-101436.md): Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). (CVSS 4.1, Oracle Siebel CRM Cloud Applications) - [CVE-2026-101435](https://cve.now/CVE-2026-101435.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). (CVSS 6.6, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101434](https://cve.now/CVE-2026-101434.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server). (CVSS 7.6, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101433](https://cve.now/CVE-2026-101433.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). (CVSS 5.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101432](https://cve.now/CVE-2026-101432.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). (CVSS 5.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101431](https://cve.now/CVE-2026-101431.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). (CVSS 8.7, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101430](https://cve.now/CVE-2026-101430.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). (CVSS 6.2, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101429](https://cve.now/CVE-2026-101429.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 7.0, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101428](https://cve.now/CVE-2026-101428.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 7.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101427](https://cve.now/CVE-2026-101427.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 8.1, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101426](https://cve.now/CVE-2026-101426.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 6.9, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101425](https://cve.now/CVE-2026-101425.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 2.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101424](https://cve.now/CVE-2026-101424.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 5.8, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101423](https://cve.now/CVE-2026-101423.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 4.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101422](https://cve.now/CVE-2026-101422.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 8.1, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101421](https://cve.now/CVE-2026-101421.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 7.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101420](https://cve.now/CVE-2026-101420.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 9.6, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101419](https://cve.now/CVE-2026-101419.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101418](https://cve.now/CVE-2026-101418.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 6.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101417](https://cve.now/CVE-2026-101417.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo). (CVSS 3.7, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101416](https://cve.now/CVE-2026-101416.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin). (CVSS 7.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101415](https://cve.now/CVE-2026-101415.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). (CVSS 3.1, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101414](https://cve.now/CVE-2026-101414.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). (CVSS 2.9, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101413](https://cve.now/CVE-2026-101413.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). (CVSS 5.3, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101412](https://cve.now/CVE-2026-101412.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). (CVSS 5.8, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101411](https://cve.now/CVE-2026-101411.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 8.1, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101410](https://cve.now/CVE-2026-101410.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 7.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101409](https://cve.now/CVE-2026-101409.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). (CVSS 7.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101408](https://cve.now/CVE-2026-101408.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). (CVSS 6.1, Oracle Siebel Apps - Marketing) - [CVE-2026-101407](https://cve.now/CVE-2026-101407.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant). (CVSS 5.5, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101406](https://cve.now/CVE-2026-101406.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 3.7, Oracle Siebel Apps - Marketing) - [CVE-2026-101405](https://cve.now/CVE-2026-101405.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 4.8, Oracle Siebel Apps - Marketing) - [CVE-2026-101404](https://cve.now/CVE-2026-101404.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 3.9, Oracle Siebel Apps - Marketing) - [CVE-2026-101403](https://cve.now/CVE-2026-101403.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). (CVSS 5.9, Oracle Siebel Apps - Marketing) - [CVE-2026-101402](https://cve.now/CVE-2026-101402.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). (CVSS 3.7, Oracle Siebel Apps - Marketing) - [CVE-2026-101401](https://cve.now/CVE-2026-101401.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 2.9, Oracle Siebel Apps - Marketing) - [CVE-2026-101400](https://cve.now/CVE-2026-101400.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 2.9, Oracle Siebel Apps - Marketing) - [CVE-2026-101399](https://cve.now/CVE-2026-101399.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 5.3, Oracle Siebel Apps - Marketing) - [CVE-2026-101398](https://cve.now/CVE-2026-101398.md): Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Capacity) - [CVE-2026-101397](https://cve.now/CVE-2026-101397.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 2.2, Oracle Siebel Apps - Marketing) - [CVE-2026-101396](https://cve.now/CVE-2026-101396.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 4.7, Oracle Siebel Apps - Marketing) - [CVE-2026-101395](https://cve.now/CVE-2026-101395.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 6.1, Oracle Siebel Apps - Marketing) - [CVE-2026-101394](https://cve.now/CVE-2026-101394.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 5.3, Oracle Siebel Apps - Marketing) - [CVE-2026-101393](https://cve.now/CVE-2026-101393.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 4.3, Oracle Siebel Apps - Marketing) - [CVE-2026-101392](https://cve.now/CVE-2026-101392.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 5.5, Oracle Siebel Apps - Marketing) - [CVE-2026-101391](https://cve.now/CVE-2026-101391.md): Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). (CVSS 6.1, Oracle Siebel Apps - Marketing) - [CVE-2026-101390](https://cve.now/CVE-2026-101390.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 8.1, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101389](https://cve.now/CVE-2026-101389.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). (CVSS 5.9, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101388](https://cve.now/CVE-2026-101388.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 7.1, Oracle PeopleSoft Enterprise PeopleTools) - [CVE-2026-101387](https://cve.now/CVE-2026-101387.md): Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). (CVSS 7.6, Oracle Capacity) - [CVE-2026-101386](https://cve.now/CVE-2026-101386.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 4.2, Oracle REST Data Services) - [CVE-2026-101385](https://cve.now/CVE-2026-101385.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 4.9, Oracle REST Data Services) - [CVE-2026-101384](https://cve.now/CVE-2026-101384.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 5.0, Oracle REST Data Services) - [CVE-2026-101383](https://cve.now/CVE-2026-101383.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 5.4, Oracle REST Data Services) - [CVE-2026-101382](https://cve.now/CVE-2026-101382.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 4.2, Oracle REST Data Services) - [CVE-2026-101381](https://cve.now/CVE-2026-101381.md): Vulnerability in Oracle REST Data Services (component: ADP). (CVSS 5.4, Oracle REST Data Services) - [CVE-2026-101380](https://cve.now/CVE-2026-101380.md): Vulnerability in Oracle REST Data Services (component: ADP). (CVSS 5.4, Oracle REST Data Services) - [CVE-2026-101379](https://cve.now/CVE-2026-101379.md): Vulnerability in Oracle REST Data Services (component: ADP). (CVSS 5.3, Oracle REST Data Services) - [CVE-2026-101378](https://cve.now/CVE-2026-101378.md): Vulnerability in Oracle REST Data Services (component: ADP). (CVSS 4.3, Oracle REST Data Services) - [CVE-2026-101377](https://cve.now/CVE-2026-101377.md): Vulnerability in Oracle REST Data Services (component: Database Actions). (CVSS 2.7, Oracle REST Data Services) - [CVE-2026-101376](https://cve.now/CVE-2026-101376.md): Vulnerability in Oracle REST Data Services (component: Database Actions). (CVSS 4.7, Oracle REST Data Services) - [CVE-2026-101375](https://cve.now/CVE-2026-101375.md): Vulnerability in Oracle REST Data Services (component: Database Actions). (CVSS 6.3, Oracle REST Data Services) - [CVE-2026-101374](https://cve.now/CVE-2026-101374.md): Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). (CVSS 5.9, Oracle REST Data Services) - [CVE-2026-101373](https://cve.now/CVE-2026-101373.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 2.4, Oracle REST Data Services) - [CVE-2026-101372](https://cve.now/CVE-2026-101372.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 3.7, Oracle REST Data Services) - [CVE-2026-101371](https://cve.now/CVE-2026-101371.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 3.1, Oracle REST Data Services) - [CVE-2026-101370](https://cve.now/CVE-2026-101370.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 3.1, Oracle REST Data Services) - [CVE-2026-101369](https://cve.now/CVE-2026-101369.md): Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). (CVSS 6.1, Oracle REST Data Services) - [CVE-2026-101368](https://cve.now/CVE-2026-101368.md): Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). (CVSS 5.4, Oracle REST Data Services) - [CVE-2026-101367](https://cve.now/CVE-2026-101367.md): Vulnerability in Oracle REST Data Services (component: ADP). (CVSS 5.4, Oracle REST Data Services) - [CVE-2026-101366](https://cve.now/CVE-2026-101366.md): Vulnerability in Oracle REST Data Services (component: ADP). (CVSS 4.3, Oracle REST Data Services) - [CVE-2026-101365](https://cve.now/CVE-2026-101365.md): Vulnerability in Oracle REST Data Services (component: Database Actions). (CVSS 4.7, Oracle REST Data Services) - [CVE-2026-101364](https://cve.now/CVE-2026-101364.md): Vulnerability in Oracle REST Data Services (component: Database Actions). (CVSS 5.4, Oracle REST Data Services) - [CVE-2026-101363](https://cve.now/CVE-2026-101363.md): Vulnerability in Oracle REST Data Services (component: Graph QL). (CVSS 5.3, Oracle REST Data Services) - [CVE-2026-101362](https://cve.now/CVE-2026-101362.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 6.9, Oracle REST Data Services) - [CVE-2026-101361](https://cve.now/CVE-2026-101361.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 4.2, Oracle REST Data Services) - [CVE-2026-101360](https://cve.now/CVE-2026-101360.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 5.4, Oracle REST Data Services) - [CVE-2026-101359](https://cve.now/CVE-2026-101359.md): Vulnerability in Oracle REST Data Services (component: Core). (CVSS 5.3, Oracle REST Data Services) - [CVE-2026-113729](https://cve.now/CVE-2026-113729.md): Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization (CVSS 7.5, moov-io signedxml · github.com/moov-io/signedxml) - [CVE-2026-113728](https://cve.now/CVE-2026-113728.md): Bulwark Webmail: DNS-rebinding SSRF in public iCalendar fetch endpoint (CVSS 7.5, bulwarkmail webmail) - [CVE-2026-113727](https://cve.now/CVE-2026-113727.md): OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs (CVSS 7.4, openchoreo · github.com/openchoreo/openchoreo) - [CVE-2026-113812](https://cve.now/CVE-2026-113812.md): Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates (CVSS 9.1, Mozilla-CA) - [CVE-2026-113274](https://cve.now/CVE-2026-113274.md): Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113039](https://cve.now/CVE-2026-113039.md): Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome) - [CVE-2026-113125](https://cve.now/CVE-2026-113125.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113013](https://cve.now/CVE-2026-113013.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113088](https://cve.now/CVE-2026-113088.md): Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 8.8, Google Chrome) - [CVE-2026-113083](https://cve.now/CVE-2026-113083.md): Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113286](https://cve.now/CVE-2026-113286.md): Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome) - [CVE-2026-113227](https://cve.now/CVE-2026-113227.md): Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113122](https://cve.now/CVE-2026-113122.md): Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox (CVSS 6.5, Google Chrome) - [CVE-2026-112996](https://cve.now/CVE-2026-112996.md): Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome) - [CVE-2026-113294](https://cve.now/CVE-2026-113294.md): Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome) - [CVE-2026-113130](https://cve.now/CVE-2026-113130.md): Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113074](https://cve.now/CVE-2026-113074.md): Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113067](https://cve.now/CVE-2026-113067.md): Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113046](https://cve.now/CVE-2026-113046.md): Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary co (CVSS 8.8, Google Chrome) - [CVE-2026-113182](https://cve.now/CVE-2026-113182.md): Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbo (CVSS 8.8, Google Chrome) - [CVE-2026-113331](https://cve.now/CVE-2026-113331.md): Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113237](https://cve.now/CVE-2026-113237.md): Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a cr (CVSS 6.5, Google Chrome) - [CVE-2026-113314](https://cve.now/CVE-2026-113314.md): Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-112994](https://cve.now/CVE-2026-112994.md): Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113063](https://cve.now/CVE-2026-113063.md): Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 8.8, Google Chrome) - [CVE-2026-113254](https://cve.now/CVE-2026-113254.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113169](https://cve.now/CVE-2026-113169.md): Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary cod (CVSS 9.6, Google Chrome) - [CVE-2026-113132](https://cve.now/CVE-2026-113132.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113287](https://cve.now/CVE-2026-113287.md): Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113121](https://cve.now/CVE-2026-113121.md): Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbi (CVSS 8.8, Google Chrome) - [CVE-2026-113066](https://cve.now/CVE-2026-113066.md): Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted (CVSS 6.5, Google Chrome) - [CVE-2026-113107](https://cve.now/CVE-2026-113107.md): Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113085](https://cve.now/CVE-2026-113085.md): Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113288](https://cve.now/CVE-2026-113288.md): Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113248](https://cve.now/CVE-2026-113248.md): Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113061](https://cve.now/CVE-2026-113061.md): Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113313](https://cve.now/CVE-2026-113313.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113038](https://cve.now/CVE-2026-113038.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbo (CVSS 6.5, Google Chrome) - [CVE-2026-113268](https://cve.now/CVE-2026-113268.md): Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113036](https://cve.now/CVE-2026-113036.md): Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113269](https://cve.now/CVE-2026-113269.md): Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113260](https://cve.now/CVE-2026-113260.md): Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113173](https://cve.now/CVE-2026-113173.md): Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbit (CVSS 8.8, Google Chrome) - [CVE-2026-113047](https://cve.now/CVE-2026-113047.md): Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sand (CVSS 6.5, Google Chrome) - [CVE-2026-113116](https://cve.now/CVE-2026-113116.md): Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside t (CVSS 9.6, Google Chrome) - [CVE-2026-113156](https://cve.now/CVE-2026-113156.md): Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113292](https://cve.now/CVE-2026-113292.md): Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute (CVSS 8.8, Google Chrome) - [CVE-2026-113145](https://cve.now/CVE-2026-113145.md): Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitra (CVSS 8.8, Google Chrome) - [CVE-2026-113021](https://cve.now/CVE-2026-113021.md): Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome) - [CVE-2026-112998](https://cve.now/CVE-2026-112998.md): Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113017](https://cve.now/CVE-2026-113017.md): Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113184](https://cve.now/CVE-2026-113184.md): Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113140](https://cve.now/CVE-2026-113140.md): Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113180](https://cve.now/CVE-2026-113180.md): Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary cod (CVSS 8.8, Google Chrome) - [CVE-2026-113186](https://cve.now/CVE-2026-113186.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbo (CVSS 9.6, Google Chrome) - [CVE-2026-113080](https://cve.now/CVE-2026-113080.md): Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome) - [CVE-2026-113025](https://cve.now/CVE-2026-113025.md): Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113024](https://cve.now/CVE-2026-113024.md): Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome) - [CVE-2026-113299](https://cve.now/CVE-2026-113299.md): Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113245](https://cve.now/CVE-2026-113245.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113306](https://cve.now/CVE-2026-113306.md): Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome) - [CVE-2026-113296](https://cve.now/CVE-2026-113296.md): Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox v (CVSS 6.5, Google Chrome) - [CVE-2026-113029](https://cve.now/CVE-2026-113029.md): Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome) - [CVE-2026-113152](https://cve.now/CVE-2026-113152.md): Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113226](https://cve.now/CVE-2026-113226.md): Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113330](https://cve.now/CVE-2026-113330.md): Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbit (CVSS 8.8, Google Chrome) - [CVE-2026-113023](https://cve.now/CVE-2026-113023.md): Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 9.6, Google Chrome) - [CVE-2026-113247](https://cve.now/CVE-2026-113247.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113048](https://cve.now/CVE-2026-113048.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113244](https://cve.now/CVE-2026-113244.md): Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113241](https://cve.now/CVE-2026-113241.md): Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar (CVSS 8.8, Google Chrome) - [CVE-2026-113291](https://cve.now/CVE-2026-113291.md): Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113223](https://cve.now/CVE-2026-113223.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbo (CVSS 6.5, Google Chrome) - [CVE-2026-113167](https://cve.now/CVE-2026-113167.md): Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113213](https://cve.now/CVE-2026-113213.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113300](https://cve.now/CVE-2026-113300.md): Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside (CVSS 9.6, Google Chrome) - [CVE-2026-113004](https://cve.now/CVE-2026-113004.md): Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113214](https://cve.now/CVE-2026-113214.md): Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 8.8, Google Chrome) - [CVE-2026-113027](https://cve.now/CVE-2026-113027.md): Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113201](https://cve.now/CVE-2026-113201.md): Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the san (CVSS 6.5, Google Chrome) - [CVE-2026-113056](https://cve.now/CVE-2026-113056.md): Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome) - [CVE-2026-113103](https://cve.now/CVE-2026-113103.md): Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113256](https://cve.now/CVE-2026-113256.md): Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113229](https://cve.now/CVE-2026-113229.md): Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113168](https://cve.now/CVE-2026-113168.md): Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113091](https://cve.now/CVE-2026-113091.md): Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code (CVSS 8.8, Google Chrome) - [CVE-2026-113015](https://cve.now/CVE-2026-113015.md): Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113114](https://cve.now/CVE-2026-113114.md): Use after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113323](https://cve.now/CVE-2026-113323.md): Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar (CVSS 8.8, Google Chrome) - [CVE-2026-113312](https://cve.now/CVE-2026-113312.md): Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 8.8, Google Chrome) - [CVE-2026-113053](https://cve.now/CVE-2026-113053.md): Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113215](https://cve.now/CVE-2026-113215.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113251](https://cve.now/CVE-2026-113251.md): Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome) - [CVE-2026-113086](https://cve.now/CVE-2026-113086.md): Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome) - [CVE-2026-113133](https://cve.now/CVE-2026-113133.md): Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113052](https://cve.now/CVE-2026-113052.md): Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113340](https://cve.now/CVE-2026-113340.md): Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside (CVSS 6.5, Google Chrome) - [CVE-2026-113089](https://cve.now/CVE-2026-113089.md): Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 9.6, Google Chrome) - [CVE-2026-113235](https://cve.now/CVE-2026-113235.md): Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary co (CVSS 9.6, Google Chrome) - [CVE-2026-113157](https://cve.now/CVE-2026-113157.md): Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via (CVSS 6.5, Google Chrome) - [CVE-2026-113143](https://cve.now/CVE-2026-113143.md): Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page. (CVSS 4.3, Google Chrome) - [CVE-2026-113200](https://cve.now/CVE-2026-113200.md): Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113111](https://cve.now/CVE-2026-113111.md): Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113008](https://cve.now/CVE-2026-113008.md): Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar (CVSS 8.8, Google Chrome) - [CVE-2026-113050](https://cve.now/CVE-2026-113050.md): Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted (CVSS 6.5, Google Chrome) - [CVE-2026-113096](https://cve.now/CVE-2026-113096.md): Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113062](https://cve.now/CVE-2026-113062.md): Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome) - [CVE-2026-113297](https://cve.now/CVE-2026-113297.md): Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a craft (CVSS 6.5, Google Chrome) - [CVE-2026-113258](https://cve.now/CVE-2026-113258.md): Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113170](https://cve.now/CVE-2026-113170.md): Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113203](https://cve.now/CVE-2026-113203.md): Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the san (CVSS 8.8, Google Chrome) - [CVE-2026-113197](https://cve.now/CVE-2026-113197.md): Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113199](https://cve.now/CVE-2026-113199.md): Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a cra (CVSS 6.5, Google Chrome) - [CVE-2026-113002](https://cve.now/CVE-2026-113002.md): Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insi (CVSS 6.5, Google Chrome) - [CVE-2026-113065](https://cve.now/CVE-2026-113065.md): Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113233](https://cve.now/CVE-2026-113233.md): Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 8.8, Google Chrome) - [CVE-2026-113159](https://cve.now/CVE-2026-113159.md): Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive informat (CVSS 6.5, Google Chrome) - [CVE-2026-113342](https://cve.now/CVE-2026-113342.md): Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox (CVSS 9.6, Google Chrome) - [CVE-2026-113344](https://cve.now/CVE-2026-113344.md): Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113221](https://cve.now/CVE-2026-113221.md): Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113100](https://cve.now/CVE-2026-113100.md): Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113030](https://cve.now/CVE-2026-113030.md): Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy… (CVSS 8.8, Google Chrome) - [CVE-2026-113138](https://cve.now/CVE-2026-113138.md): Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome) - [CVE-2026-113153](https://cve.now/CVE-2026-113153.md): Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome) - [CVE-2026-113037](https://cve.now/CVE-2026-113037.md): Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-112997](https://cve.now/CVE-2026-112997.md): Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113120](https://cve.now/CVE-2026-113120.md): Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome) - [CVE-2026-113028](https://cve.now/CVE-2026-113028.md): Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113151](https://cve.now/CVE-2026-113151.md): Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafte (CVSS 6.5, Google Chrome) - [CVE-2026-113177](https://cve.now/CVE-2026-113177.md): Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113304](https://cve.now/CVE-2026-113304.md): Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside t (CVSS 6.5, Google Chrome) - [CVE-2026-113267](https://cve.now/CVE-2026-113267.md): Memory corruption in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome) - [CVE-2026-113087](https://cve.now/CVE-2026-113087.md): Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113270](https://cve.now/CVE-2026-113270.md): Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox (CVSS 9.6, Google Chrome) - [CVE-2026-113216](https://cve.now/CVE-2026-113216.md): Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113099](https://cve.now/CVE-2026-113099.md): Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute (CVSS 8.8, Google Chrome) - [CVE-2026-113228](https://cve.now/CVE-2026-113228.md): Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113259](https://cve.now/CVE-2026-113259.md): Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113075](https://cve.now/CVE-2026-113075.md): Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113187](https://cve.now/CVE-2026-113187.md): Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome) - [CVE-2026-113007](https://cve.now/CVE-2026-113007.md): Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code out (CVSS 9.6, Google Chrome) - [CVE-2026-113110](https://cve.now/CVE-2026-113110.md): Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbo (CVSS 8.8, Google Chrome) - [CVE-2026-113178](https://cve.now/CVE-2026-113178.md): Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the (CVSS 6.5, Google Chrome) - [CVE-2026-113165](https://cve.now/CVE-2026-113165.md): Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome) - [CVE-2026-113282](https://cve.now/CVE-2026-113282.md): Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code in (CVSS 8.8, Google Chrome) - [CVE-2026-113077](https://cve.now/CVE-2026-113077.md): Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the (CVSS 6.5, Google Chrome) - [CVE-2026-113158](https://cve.now/CVE-2026-113158.md): Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome) - [CVE-2026-113090](https://cve.now/CVE-2026-113090.md): Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sa (CVSS 8.8, Google Chrome) - [CVE-2026-113230](https://cve.now/CVE-2026-113230.md): Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome) - [CVE-2026-113124](https://cve.now/CVE-2026-113124.md): Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code in (CVSS 8.8, Google Chrome) - [CVE-2026-113326](https://cve.now/CVE-2026-113326.md): Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside (CVSS 6.5, Google Chrome) - [CVE-2026-113243](https://cve.now/CVE-2026-113243.md): Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113064](https://cve.now/CVE-2026-113064.md): Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary co (CVSS 8.8, Google Chrome) - [CVE-2026-113001](https://cve.now/CVE-2026-113001.md): Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113106](https://cve.now/CVE-2026-113106.md): Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113136](https://cve.now/CVE-2026-113136.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113277](https://cve.now/CVE-2026-113277.md): Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the s (CVSS 6.5, Google Chrome) - [CVE-2026-113123](https://cve.now/CVE-2026-113123.md): Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome) - [CVE-2026-113054](https://cve.now/CVE-2026-113054.md): Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via (CVSS 6.5, Google Chrome) - [CVE-2026-113144](https://cve.now/CVE-2026-113144.md): Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafte (CVSS 6.5, Google Chrome) - [CVE-2026-113204](https://cve.now/CVE-2026-113204.md): Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execut (CVSS 8.8, Google Chrome) - [CVE-2026-113032](https://cve.now/CVE-2026-113032.md): Memory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insid (CVSS 8.8, Google Chrome) - [CVE-2026-113049](https://cve.now/CVE-2026-113049.md): Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113128](https://cve.now/CVE-2026-113128.md): Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a… (CVSS 8.8, Google Chrome) - [CVE-2026-113139](https://cve.now/CVE-2026-113139.md): Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbo (CVSS 6.5, Google Chrome) - [CVE-2026-113081](https://cve.now/CVE-2026-113081.md): Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113031](https://cve.now/CVE-2026-113031.md): Memory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113126](https://cve.now/CVE-2026-113126.md): Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome) - [CVE-2026-113041](https://cve.now/CVE-2026-113041.md): Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113246](https://cve.now/CVE-2026-113246.md): Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insid (CVSS 6.5, Google Chrome) - [CVE-2026-113016](https://cve.now/CVE-2026-113016.md): Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 8.8, Google Chrome) - [CVE-2026-113202](https://cve.now/CVE-2026-113202.md): Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113043](https://cve.now/CVE-2026-113043.md): Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sa (CVSS 8.8, Google Chrome) - [CVE-2026-113329](https://cve.now/CVE-2026-113329.md): Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insid (CVSS 6.5, Google Chrome) - [CVE-2026-113265](https://cve.now/CVE-2026-113265.md): Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113073](https://cve.now/CVE-2026-113073.md): Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113010](https://cve.now/CVE-2026-113010.md): Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a c (CVSS 6.5, Google Chrome) - [CVE-2026-113148](https://cve.now/CVE-2026-113148.md): Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome) - [CVE-2026-113224](https://cve.now/CVE-2026-113224.md): Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memo (CVSS 6.5, Google Chrome) - [CVE-2026-113308](https://cve.now/CVE-2026-113308.md): Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113084](https://cve.now/CVE-2026-113084.md): Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 9.6, Google Chrome) - [CVE-2026-113325](https://cve.now/CVE-2026-113325.md): Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside th (CVSS 6.5, Google Chrome) - [CVE-2026-113076](https://cve.now/CVE-2026-113076.md): Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113255](https://cve.now/CVE-2026-113255.md): Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insid (CVSS 8.8, Google Chrome) - [CVE-2026-113335](https://cve.now/CVE-2026-113335.md): Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113328](https://cve.now/CVE-2026-113328.md): Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome) - [CVE-2026-113195](https://cve.now/CVE-2026-113195.md): Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary co (CVSS 8.8, Google Chrome) - [CVE-2026-113218](https://cve.now/CVE-2026-113218.md): Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbo (CVSS 8.8, Google Chrome) - [CVE-2026-113276](https://cve.now/CVE-2026-113276.md): Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitr (CVSS 8.8, Google Chrome) - [CVE-2026-113042](https://cve.now/CVE-2026-113042.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113171](https://cve.now/CVE-2026-113171.md): Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar (CVSS 9.6, Google Chrome) - [CVE-2026-113185](https://cve.now/CVE-2026-113185.md): Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113206](https://cve.now/CVE-2026-113206.md): Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113149](https://cve.now/CVE-2026-113149.md): Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113262](https://cve.now/CVE-2026-113262.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113332](https://cve.now/CVE-2026-113332.md): Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113172](https://cve.now/CVE-2026-113172.md): Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome) - [CVE-2026-113261](https://cve.now/CVE-2026-113261.md): Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code out (CVSS 9.6, Google Chrome) - [CVE-2026-112995](https://cve.now/CVE-2026-112995.md): Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome) - [CVE-2026-112992](https://cve.now/CVE-2026-112992.md): Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside (CVSS 9.6, Google Chrome) - [CVE-2026-113190](https://cve.now/CVE-2026-113190.md): Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113278](https://cve.now/CVE-2026-113278.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113071](https://cve.now/CVE-2026-113071.md): Use after free in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code in (CVSS 8.8, Google Chrome) - [CVE-2026-113009](https://cve.now/CVE-2026-113009.md): Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113307](https://cve.now/CVE-2026-113307.md): Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113045](https://cve.now/CVE-2026-113045.md): Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory ins (CVSS 6.5, Google Chrome) - [CVE-2026-113115](https://cve.now/CVE-2026-113115.md): Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113060](https://cve.now/CVE-2026-113060.md): Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary co (CVSS 8.8, Google Chrome) - [CVE-2026-113189](https://cve.now/CVE-2026-113189.md): Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a (CVSS 9.6, Google Chrome) - [CVE-2026-113194](https://cve.now/CVE-2026-113194.md): Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113238](https://cve.now/CVE-2026-113238.md): Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbit (CVSS 8.8, Google Chrome) - [CVE-2026-113208](https://cve.now/CVE-2026-113208.md): Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sa (CVSS 8.8, Google Chrome) - [CVE-2026-113137](https://cve.now/CVE-2026-113137.md): Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sand (CVSS 6.5, Google Chrome) - [CVE-2026-113059](https://cve.now/CVE-2026-113059.md): Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113321](https://cve.now/CVE-2026-113321.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113112](https://cve.now/CVE-2026-113112.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113272](https://cve.now/CVE-2026-113272.md): Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113249](https://cve.now/CVE-2026-113249.md): Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbit (CVSS 8.8, Google Chrome) - [CVE-2026-112999](https://cve.now/CVE-2026-112999.md): Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome) - [CVE-2026-113327](https://cve.now/CVE-2026-113327.md): Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113232](https://cve.now/CVE-2026-113232.md): Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113118](https://cve.now/CVE-2026-113118.md): Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113162](https://cve.now/CVE-2026-113162.md): Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome) - [CVE-2026-113205](https://cve.now/CVE-2026-113205.md): Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113207](https://cve.now/CVE-2026-113207.md): Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code in (CVSS 8.8, Google Chrome) - [CVE-2026-113146](https://cve.now/CVE-2026-113146.md): Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome) - [CVE-2026-113289](https://cve.now/CVE-2026-113289.md): Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitr (CVSS 8.8, Google Chrome) - [CVE-2026-113183](https://cve.now/CVE-2026-113183.md): Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome) - [CVE-2026-113290](https://cve.now/CVE-2026-113290.md): Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the s (CVSS 8.8, Google Chrome) - [CVE-2026-113155](https://cve.now/CVE-2026-113155.md): Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113003](https://cve.now/CVE-2026-113003.md): Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113196](https://cve.now/CVE-2026-113196.md): Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy… (CVSS 6.5, Google Chrome) - [CVE-2026-113051](https://cve.now/CVE-2026-113051.md): Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via (CVSS 6.5, Google Chrome) - [CVE-2026-113166](https://cve.now/CVE-2026-113166.md): Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insid (CVSS 8.8, Google Chrome) - [CVE-2026-113209](https://cve.now/CVE-2026-113209.md): Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insid (CVSS 6.5, Google Chrome) - [CVE-2026-113005](https://cve.now/CVE-2026-113005.md): Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insid (CVSS 8.8, Google Chrome) - [CVE-2026-113219](https://cve.now/CVE-2026-113219.md): Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113057](https://cve.now/CVE-2026-113057.md): Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy… (CVSS 5.4, Google Chrome) - [CVE-2026-113319](https://cve.now/CVE-2026-113319.md): Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113343](https://cve.now/CVE-2026-113343.md): Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113108](https://cve.now/CVE-2026-113108.md): Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113014](https://cve.now/CVE-2026-113014.md): Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ou (CVSS 9.6, Google Chrome) - [CVE-2026-113283](https://cve.now/CVE-2026-113283.md): Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execu (CVSS 9.6, Google Chrome) - [CVE-2026-113275](https://cve.now/CVE-2026-113275.md): Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome) - [CVE-2026-113220](https://cve.now/CVE-2026-113220.md): Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbit (CVSS 8.8, Google Chrome) - [CVE-2026-113105](https://cve.now/CVE-2026-113105.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113264](https://cve.now/CVE-2026-113264.md): Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary… (CVSS 8.8, Google Chrome) - [CVE-2026-113129](https://cve.now/CVE-2026-113129.md): Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive inform (CVSS 6.5, Google Chrome) - [CVE-2026-113127](https://cve.now/CVE-2026-113127.md): Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113337](https://cve.now/CVE-2026-113337.md): Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome) - [CVE-2026-113147](https://cve.now/CVE-2026-113147.md): Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary cod (CVSS 8.8, Google Chrome) - [CVE-2026-113333](https://cve.now/CVE-2026-113333.md): Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sand (CVSS 6.5, Google Chrome) - [CVE-2026-113131](https://cve.now/CVE-2026-113131.md): Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbo (CVSS 8.8, Google Chrome) - [CVE-2026-113239](https://cve.now/CVE-2026-113239.md): Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insid (CVSS 8.8, Google Chrome) - [CVE-2026-113164](https://cve.now/CVE-2026-113164.md): Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113302](https://cve.now/CVE-2026-113302.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113026](https://cve.now/CVE-2026-113026.md): Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside t (CVSS 6.5, Google Chrome) - [CVE-2026-113033](https://cve.now/CVE-2026-113033.md): Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome) - [CVE-2026-113078](https://cve.now/CVE-2026-113078.md): Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 9.6, Google Chrome) - [CVE-2026-113311](https://cve.now/CVE-2026-113311.md): Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113150](https://cve.now/CVE-2026-113150.md): Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113176](https://cve.now/CVE-2026-113176.md): Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113070](https://cve.now/CVE-2026-113070.md): Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a (CVSS 6.5, Google Chrome) - [CVE-2026-113257](https://cve.now/CVE-2026-113257.md): Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome) - [CVE-2026-113198](https://cve.now/CVE-2026-113198.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113011](https://cve.now/CVE-2026-113011.md): Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary co (CVSS 8.8, Google Chrome) - [CVE-2026-113211](https://cve.now/CVE-2026-113211.md): Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code o (CVSS 9.6, Google Chrome) - [CVE-2026-113035](https://cve.now/CVE-2026-113035.md): Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox vi (CVSS 6.5, Google Chrome) - [CVE-2026-113281](https://cve.now/CVE-2026-113281.md): Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome) - [CVE-2026-113142](https://cve.now/CVE-2026-113142.md): Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sand (CVSS 6.5, Google Chrome) - [CVE-2026-113102](https://cve.now/CVE-2026-113102.md): Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a c (CVSS 6.5, Google Chrome) - [CVE-2026-113240](https://cve.now/CVE-2026-113240.md): Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113094](https://cve.now/CVE-2026-113094.md): Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113034](https://cve.now/CVE-2026-113034.md): Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113301](https://cve.now/CVE-2026-113301.md): Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome) - [CVE-2026-113018](https://cve.now/CVE-2026-113018.md): Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113263](https://cve.now/CVE-2026-113263.md): Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome) - [CVE-2026-113006](https://cve.now/CVE-2026-113006.md): Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome) - [CVE-2026-113069](https://cve.now/CVE-2026-113069.md): Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome) - [CVE-2026-113113](https://cve.now/CVE-2026-113113.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113109](https://cve.now/CVE-2026-113109.md): Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113250](https://cve.now/CVE-2026-113250.md): Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the s (CVSS 8.8, Google Chrome) - [CVE-2026-113191](https://cve.now/CVE-2026-113191.md): Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113079](https://cve.now/CVE-2026-113079.md): Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome) - [CVE-2026-113022](https://cve.now/CVE-2026-113022.md): Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113174](https://cve.now/CVE-2026-113174.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113231](https://cve.now/CVE-2026-113231.md): Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 8.8, Google Chrome) - [CVE-2026-113320](https://cve.now/CVE-2026-113320.md): Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 8.8, Google Chrome) - [CVE-2026-113068](https://cve.now/CVE-2026-113068.md): Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113055](https://cve.now/CVE-2026-113055.md): Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insid (CVSS 8.8, Google Chrome) - [CVE-2026-112993](https://cve.now/CVE-2026-112993.md): Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113179](https://cve.now/CVE-2026-113179.md): Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113000](https://cve.now/CVE-2026-113000.md): Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113212](https://cve.now/CVE-2026-113212.md): Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page. (no CVSS, Google Chrome) - [CVE-2026-113160](https://cve.now/CVE-2026-113160.md): Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113095](https://cve.now/CVE-2026-113095.md): Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome) - [CVE-2026-113019](https://cve.now/CVE-2026-113019.md): Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113181](https://cve.now/CVE-2026-113181.md): Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome) - [CVE-2026-113336](https://cve.now/CVE-2026-113336.md): Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code out (CVSS 9.6, Google Chrome) - [CVE-2026-113154](https://cve.now/CVE-2026-113154.md): Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113161](https://cve.now/CVE-2026-113161.md): Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113040](https://cve.now/CVE-2026-113040.md): Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome) - [CVE-2026-113217](https://cve.now/CVE-2026-113217.md): Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code i (CVSS 8.8, Google Chrome) - [CVE-2026-113295](https://cve.now/CVE-2026-113295.md): Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbo (CVSS 6.5, Google Chrome) - [CVE-2026-113309](https://cve.now/CVE-2026-113309.md): Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafte (CVSS 6.5, Google Chrome) - [CVE-2026-113192](https://cve.now/CVE-2026-113192.md): Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113175](https://cve.now/CVE-2026-113175.md): Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113012](https://cve.now/CVE-2026-113012.md): Improper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome) - [CVE-2026-113093](https://cve.now/CVE-2026-113093.md): Memory corruption in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome) - [CVE-2026-113338](https://cve.now/CVE-2026-113338.md): Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113310](https://cve.now/CVE-2026-113310.md): Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a cr (CVSS 6.5, Google Chrome) - [CVE-2026-113318](https://cve.now/CVE-2026-113318.md): Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sa (CVSS 8.8, Google Chrome) - [CVE-2026-113222](https://cve.now/CVE-2026-113222.md): Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the san (CVSS 9.6, Google Chrome) - [CVE-2026-113020](https://cve.now/CVE-2026-113020.md): Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ou (CVSS 9.6, Google Chrome) - [CVE-2026-113334](https://cve.now/CVE-2026-113334.md): Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute ar (CVSS 8.8, Google Chrome) - [CVE-2026-113324](https://cve.now/CVE-2026-113324.md): Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome) - [CVE-2026-113285](https://cve.now/CVE-2026-113285.md): Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113210](https://cve.now/CVE-2026-113210.md): Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113225](https://cve.now/CVE-2026-113225.md): Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insi (CVSS 6.5, Google Chrome) - [CVE-2026-113293](https://cve.now/CVE-2026-113293.md): Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113273](https://cve.now/CVE-2026-113273.md): Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113266](https://cve.now/CVE-2026-113266.md): Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 8.8, Google Chrome) - [CVE-2026-113135](https://cve.now/CVE-2026-113135.md): Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary cod (CVSS 8.8, Google Chrome) - [CVE-2026-113044](https://cve.now/CVE-2026-113044.md): Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome) - [CVE-2026-113305](https://cve.now/CVE-2026-113305.md): Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113252](https://cve.now/CVE-2026-113252.md): Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute ar (CVSS 9.6, Google Chrome) - [CVE-2026-113234](https://cve.now/CVE-2026-113234.md): Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome) - [CVE-2026-113316](https://cve.now/CVE-2026-113316.md): Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sa (CVSS 8.8, Google Chrome) - [CVE-2026-113141](https://cve.now/CVE-2026-113141.md): Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113284](https://cve.now/CVE-2026-113284.md): Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113236](https://cve.now/CVE-2026-113236.md): Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside th (CVSS 8.8, Google Chrome) - [CVE-2026-113315](https://cve.now/CVE-2026-113315.md): Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome) - [CVE-2026-113298](https://cve.now/CVE-2026-113298.md): Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113253](https://cve.now/CVE-2026-113253.md): Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome) - [CVE-2026-113163](https://cve.now/CVE-2026-113163.md): Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113322](https://cve.now/CVE-2026-113322.md): Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox vi (CVSS 6.5, Google Chrome) - [CVE-2026-113104](https://cve.now/CVE-2026-113104.md): Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113188](https://cve.now/CVE-2026-113188.md): Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome) - [CVE-2026-113117](https://cve.now/CVE-2026-113117.md): Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitr (CVSS 8.8, Google Chrome) - [CVE-2026-113193](https://cve.now/CVE-2026-113193.md): Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via (CVSS 6.5, Google Chrome) - [CVE-2026-113317](https://cve.now/CVE-2026-113317.md): Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitr (CVSS 8.8, Google Chrome) - [CVE-2026-113339](https://cve.now/CVE-2026-113339.md): Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome) - [CVE-2026-113134](https://cve.now/CVE-2026-113134.md): Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113092](https://cve.now/CVE-2026-113092.md): Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113119](https://cve.now/CVE-2026-113119.md): Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113082](https://cve.now/CVE-2026-113082.md): Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside (CVSS 6.5, Google Chrome) - [CVE-2026-113058](https://cve.now/CVE-2026-113058.md): Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome) - [CVE-2026-113242](https://cve.now/CVE-2026-113242.md): Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113098](https://cve.now/CVE-2026-113098.md): Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sa (CVSS 6.5, Google Chrome) - [CVE-2026-113097](https://cve.now/CVE-2026-113097.md): Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome) - [CVE-2026-113101](https://cve.now/CVE-2026-113101.md): Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113303](https://cve.now/CVE-2026-113303.md): Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome) - [CVE-2026-113271](https://cve.now/CVE-2026-113271.md): Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb (CVSS 8.8, Google Chrome) - [CVE-2026-113280](https://cve.now/CVE-2026-113280.md): Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome) - [CVE-2026-113072](https://cve.now/CVE-2026-113072.md): Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the (CVSS 9.6, Google Chrome) - [CVE-2026-113279](https://cve.now/CVE-2026-113279.md): Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome) - [CVE-2026-113341](https://cve.now/CVE-2026-113341.md): Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside (CVSS 6.5, Google Chrome) - [CVE-2026-112712](https://cve.now/CVE-2026-112712.md): @fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch (CVSS 9.1, @fastify/middie) - [CVE-2026-112407](https://cve.now/CVE-2026-112407.md): Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications (CVSS 8.8, AWS CICD-toolchain-for-serverless-applications) - [CVE-2016-20104](https://cve.now/CVE-2016-20104.md): EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.php (CVSS 8.7, EyeLock nano NXT) - [CVE-2016-20103](https://cve.now/CVE-2016-20103.md): Cherry Plugin for WordPress \< 1.2.7 Path Traversal via download-content.php (CVSS 8.7, Cherry Team Cherry Plugin) - [CVE-2016-20102](https://cve.now/CVE-2016-20102.md): JavaMelody \< 1.60.0 Reflected XSS via monitoring graph parameter (CVSS 5.1, JavaMelody) - [CVE-2016-20101](https://cve.now/CVE-2016-20101.md): Issuu Panel WordPress Plugin \< 1.6.6 File Inclusion via ajax-docs.php (CVSS 9.2, Pedro Marcelo Issuu Panel) - [CVE-2016-20100](https://cve.now/CVE-2016-20100.md): Memphis Documents Library WordPress Plugin \< 3.1.6 Path Traversal via mdocs-img-preview (CVSS 8.7, Ian Howatson Memphis Documents Library) - [CVE-2015-20128](https://cve.now/CVE-2015-20128.md): FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City\_ajax.aspx (CVSS 8.8, FooSun DotNetCMS) - [CVE-2015-20125](https://cve.now/CVE-2015-20125.md): Aspose PDF Exporter WordPress Plugin \< 2.0 Path Traversal via aspose\_pdf\_exporter\_download.php (CVSS 8.7, Aspose PDF Exporter) - [CVE-2015-20124](https://cve.now/CVE-2015-20124.md): Aspose Importer & Exporter WordPress Plugin \< 3.0 Path Traversal via aspose\_import\_export\_download.php (CVSS 8.7, Aspose Importer & Exporter) - [CVE-2015-20123](https://cve.now/CVE-2015-20123.md): Aspose Doc Exporter WordPress Plugin \< 2.0 Path Traversal via aspose\_doc\_exporter\_download.php (CVSS 8.7, Aspose Doc Exporter) - [CVE-2014-125134](https://cve.now/CVE-2014-125134.md): ChurcHope WordPress Theme \< 2.2 Path Traversal via downloadlink.php (CVSS 8.7, ChurcHope) - [CVE-2014-125133](https://cve.now/CVE-2014-125133.md): NativeChurch WordPress Theme \< 1.6.2 Arbitrary File Download via download.php (CVSS 8.7, imithemes NativeChurch) - [CVE-2014-125132](https://cve.now/CVE-2014-125132.md): Blogroll Fun WordPress Plugin \< 0.8.5 Reflected XSS via blogroll.php (CVSS 5.1, Jason Newman Blogroll Fun) - [CVE-2014-125131](https://cve.now/CVE-2014-125131.md): DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php (CVSS 5.1, DedeCMS) - [CVE-2012-20005](https://cve.now/CVE-2012-20005.md): SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter (CVSS 5.1, Łukasz Więcek SocialFit) - [CVE-2012-20004](https://cve.now/CVE-2012-20004.md): K-news WordPress Plugin \< 1.1.1 Reflected XSS via fontpicker index.php ff Parameter (CVSS 5.1, Carles Reverter K-news) - [CVE-2012-20003](https://cve.now/CVE-2012-20003.md): Custom Tables WordPress Plugin \< 3.4.6 Reflected XSS via iframe.php (CVSS 5.1, Web Updates KMU Custom Tables) - [CVE-2012-20002](https://cve.now/CVE-2012-20002.md): TinyMCE Thumbnail Gallery WordPress Plugin \< 1.1.0 Path Traversal via download-image.php (CVSS 8.7, James Charlesworth TinyMCE Thumbnail Gallery) - [CVE-2026-107929](https://cve.now/CVE-2026-107929.md): local interface connection reuse mixup (CVSS 8.1, curl) - [CVE-2026-111758](https://cve.now/CVE-2026-111758.md): markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0) (CVSS 7.5, markdown-it) - [CVE-2026-107928](https://cve.now/CVE-2026-107928.md): info leak uploading over WebSockets with GnuTLS (CVSS 8.1, curl) - [CVE-2026-105960](https://cve.now/CVE-2026-105960.md): HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency (CVSS 5.5, HMS Networks PEAK-System Device Driver Setup · HMS Networks…) - [CVE-2026-94266](https://cve.now/CVE-2026-94266.md): password leak in CURLINFO\_EFFECTIVE\_URL (CVSS 7.5, curl) - [CVE-2026-110322](https://cve.now/CVE-2026-110322.md): HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference (CVSS 5.5, HMS Networks PEAK-System Device Driver Setup · HMS Networks…) - [CVE-2026-94265](https://cve.now/CVE-2026-94265.md): Authorization: Negotiate sent to foreign origin (CVSS 9.1, curl) - [CVE-2026-35499](https://cve.now/CVE-2026-35499.md): An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250 (CVSS 9.1, Totolink) - [CVE-2026-40627](https://cve.now/CVE-2026-40627.md): An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B202 (CVSS 9.1, Totolink) - [CVE-2026-28763](https://cve.now/CVE-2026-28763.md): A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R (CVSS 9.1, Totolink) - [CVE-2026-41223](https://cve.now/CVE-2026-41223.md): A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-G (CVSS 9.1, Totolink) - [CVE-2026-33568](https://cve.now/CVE-2026-33568.md): A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0. (CVSS 9.1, Totolink) - [CVE-2026-41222](https://cve.now/CVE-2026-41222.md): A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh- (CVSS 9.1, Totolink) - [CVE-2026-40615](https://cve.now/CVE-2026-40615.md): A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X20 (CVSS 9.1, Totolink) - [CVE-2026-42020](https://cve.now/CVE-2026-42020.md): Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-G (CVSS 9.1, Totolink) - [CVE-2026-42019](https://cve.now/CVE-2026-42019.md): Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-G (CVSS 9.1, Totolink) - [CVE-2026-42024](https://cve.now/CVE-2026-42024.md): Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X (CVSS 9.1, Totolink) - [CVE-2026-42023](https://cve.now/CVE-2026-42023.md): Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X (CVSS 9.1, Totolink) - [CVE-2026-42022](https://cve.now/CVE-2026-42022.md): Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X (CVSS 9.1, Totolink) - [CVE-2026-42021](https://cve.now/CVE-2026-42021.md): Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X (CVSS 9.1, Totolink) - [CVE-2026-42026](https://cve.now/CVE-2026-42026.md): Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp\_dns functionality of X2000R (version(s) (CVSS 9.1, Totolink) - [CVE-2026-42025](https://cve.now/CVE-2026-42025.md): Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp\_dns functionality of X2000R (version(s) (CVSS 9.1, Totolink) - [CVE-2026-9660](https://cve.now/CVE-2026-9660.md): Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X (CVSS 9.1, Totolink) - [CVE-2026-9659](https://cve.now/CVE-2026-9659.md): Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X (CVSS 9.1, Totolink) - [CVE-2026-9814](https://cve.now/CVE-2026-9814.md): An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2 (CVSS 9.1, Totolink) - [CVE-2026-9817](https://cve.now/CVE-2026-9817.md): A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0- (CVSS 9.1, Totolink) - [CVE-2026-9827](https://cve.now/CVE-2026-9827.md): A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B202504 (CVSS 9.1, Totolink) - [CVE-2026-9869](https://cve.now/CVE-2026-9869.md): A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0 (CVSS 9.1, Totolink) - [CVE-2026-10131](https://cve.now/CVE-2026-10131.md): An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20 (CVSS 9.1, Totolink) - [CVE-2026-10132](https://cve.now/CVE-2026-10132.md): A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B (CVSS 9.1, Totolink) - [CVE-2026-10133](https://cve.now/CVE-2026-10133.md): A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421. (CVSS 9.1, Totolink) - [CVE-2026-10135](https://cve.now/CVE-2026-10135.md): A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). (CVSS 9.1, Totolink) - [CVE-2026-10136](https://cve.now/CVE-2026-10136.md): A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20 (CVSS 9.1, Totolink) - [CVE-2026-10137](https://cve.now/CVE-2026-10137.md): A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2 (CVSS 9.1, Totolink) - [CVE-2026-10138](https://cve.now/CVE-2026-10138.md): A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421 (CVSS 9.1, Totolink) - [CVE-2026-10139](https://cve.now/CVE-2026-10139.md): A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 (CVSS 9.1, Totolink) - [CVE-2026-10141](https://cve.now/CVE-2026-10141.md): A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421 (CVSS 9.1, Totolink) - [CVE-2026-92391](https://cve.now/CVE-2026-92391.md): curl\_mime\_free stack overflow by recursion (CVSS 7.5, curl) - [CVE-2026-103672](https://cve.now/CVE-2026-103672.md): HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index (CVSS 7.1, HMS Networks PEAK-System Device Driver Setup · HMS Networks…) - [CVE-2026-92390](https://cve.now/CVE-2026-92390.md): -J no-clobber guarantee bypassed with 103 early hints (CVSS 7.5, curl) - [CVE-2026-92389](https://cve.now/CVE-2026-92389.md): TFTP direction confusion (CVSS 8.1, curl) - [CVE-2026-92388](https://cve.now/CVE-2026-92388.md): FTP wildcard write callback mixup (CVSS 9.1, curl) - [CVE-2026-92387](https://cve.now/CVE-2026-92387.md): never-ending loop via server response omission (CVSS 8.1, curl) - [CVE-2026-101103](https://cve.now/CVE-2026-101103.md): HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow (CVSS 5.5, HMS Networks PEAK-System Device Driver Setup · HMS Networks…) - [CVE-2026-92386](https://cve.now/CVE-2026-92386.md): server-set cookie aborts cookie jar load (CVSS 8.1, curl) - [CVE-2026-87866](https://cve.now/CVE-2026-87866.md): wolfSSL public-key pinning bypass (CVSS 9.1, curl) - [CVE-2026-109576](https://cve.now/CVE-2026-109576.md): HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write (CVSS 5.5, HMS Networks PEAK-System Device Driver Setup · HMS Networks…) - [CVE-2026-87865](https://cve.now/CVE-2026-87865.md): knownhost callback mismatches key as missing (CVSS 7.4, curl) - [CVE-2026-87863](https://cve.now/CVE-2026-87863.md): HSTS response erases persisted entries (CVSS 8.1, curl) - [CVE-2026-87864](https://cve.now/CVE-2026-87864.md): IMAP APPEND plus CRLF conversion command injection (CVSS 8.1, curl) - [CVE-2026-87862](https://cve.now/CVE-2026-87862.md): HSTS cache import drops longer-lived child (CVSS 8.1, curl) - [CVE-2026-87861](https://cve.now/CVE-2026-87861.md): cross-origin reuse of a Negotiate connection (CVSS 9.1, curl) - [CVE-2026-86415](https://cve.now/CVE-2026-86415.md): auto client cert connection reuse mixup (CVSS 7.5, curl) - [CVE-2026-86414](https://cve.now/CVE-2026-86414.md): leaking host credentials to HTTP proxy (CVSS 9.1, curl) - [CVE-2026-86413](https://cve.now/CVE-2026-86413.md): Negotiate credentials sent to redirected origin (CVSS 9.1, curl) - [CVE-2026-112380](https://cve.now/CVE-2026-112380.md): Missing authorization in the WhatsApp channel in Kiro Crew (CVSS 9.9, Amazon Kiro Crew) - [CVE-2026-86412](https://cve.now/CVE-2026-86412.md): server-set cookie erases cookie jar (CVSS 8.1, curl) - [CVE-2026-86411](https://cve.now/CVE-2026-86411.md): FTP connection reuse inherits client-certificate (CVSS 9.1, curl) - [CVE-2026-86410](https://cve.now/CVE-2026-86410.md): redirect to SFTP or SCP bypasses host verification (CVSS 8.1, curl) - [CVE-2026-86409](https://cve.now/CVE-2026-86409.md): stale SigV4 headers sent unintended (CVSS 8.1, curl) - [CVE-2026-113725](https://cve.now/CVE-2026-113725.md): virtualenv bash activate runs commands from an environment name with a backslash before $ (CVSS 7.8, pypa virtualenv · virtualenv) - [CVE-2026-113724](https://cve.now/CVE-2026-113724.md): virtualenv: Deletion recovery can change a symlink target's mode (CVSS 4.5, pypa virtualenv · virtualenv) - [CVE-2026-113723](https://cve.now/CVE-2026-113723.md): virtualenv: Bash prompt values can change meaning under older compatibility modes (CVSS 7.1, pypa virtualenv · virtualenv) - [CVE-2026-107692](https://cve.now/CVE-2026-107692.md): War Thunder Account Impersonation (CVSS 4.8, Gaijin Entertainment War Thunder) - [CVE-2026-113722](https://cve.now/CVE-2026-113722.md): virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax (CVSS 7.8, pypa virtualenv · virtualenv) - [CVE-2026-113721](https://cve.now/CVE-2026-113721.md): virtualenv: Generated files can follow existing destination links (CVSS 4.5, pypa virtualenv · virtualenv) - [CVE-2026-113720](https://cve.now/CVE-2026-113720.md): virtualenv: Seeded files retain permissions from an older cache (CVSS 4.4, pypa virtualenv · virtualenv) - [CVE-2026-113715](https://cve.now/CVE-2026-113715.md): virtualenv: Venv configuration readback can reinterpret path boundaries (CVSS 2.0, pypa virtualenv · virtualenv) - [CVE-2026-113719](https://cve.now/CVE-2026-113719.md): virtualenv: Seed replacement does not contain metadata deletion paths (CVSS 4.5, pypa virtualenv · virtualenv) - [CVE-2026-113718](https://cve.now/CVE-2026-113718.md): virtualenv: Xonsh activation literals depend on the script decoding codec (CVSS 7.1, pypa virtualenv · virtualenv) - [CVE-2026-113717](https://cve.now/CVE-2026-113717.md): virtualenv: Pip seeding with download omits wheel digest verification (CVSS 2.3, pypa virtualenv · virtualenv) - [CVE-2026-113716](https://cve.now/CVE-2026-113716.md): virtualenv: Builtin creation follows linked environment directories (CVSS 4.5, pypa virtualenv · virtualenv) - [CVE-2026-113869](https://cve.now/CVE-2026-113869.md): Use-after-free in S/MIME decryption during a security device password prompt (CVSS 5.4, Mozilla Thunderbird) - [CVE-2026-113868](https://cve.now/CVE-2026-113868.md): Uninitialized memory disclosure and out-of-bounds read in POP3 and SMTP NTLM authentication (CVSS 5.3, Mozilla Thunderbird) - [CVE-2026-113867](https://cve.now/CVE-2026-113867.md): Stanza injection in XMPP chat (CVSS 9.1, Mozilla Thunderbird) - [CVE-2026-113866](https://cve.now/CVE-2026-113866.md): Account password sent unencrypted during Exchange account setup (CVSS 5.9, Mozilla Thunderbird) - [CVE-2026-113712](https://cve.now/CVE-2026-113712.md): Cachet has Stored XSS in Incident Component (CVSS 4.8, cachethq cachet · cachethq/cachet) - [CVE-2026-113714](https://cve.now/CVE-2026-113714.md): virtualenv: Downloaded wheel selection and caching precede verification (CVSS 2.3, pypa virtualenv · virtualenv) - [CVE-2026-113713](https://cve.now/CVE-2026-113713.md): virtualenv: Temporary app-data can leave dangling seed package links (CVSS 4.4, pypa virtualenv · virtualenv) - [CVE-2026-111088](https://cve.now/CVE-2026-111088.md): Stored XSS in the VPN logs monitor (CVSS 6.5, Stormshield Network Security) - [CVE-2026-113810](https://cve.now/CVE-2026-113810.md): Stored XSS on SNS Enrollment Portal (CVSS 7.0, Stormshield Network Security) - [CVE-2026-111767](https://cve.now/CVE-2026-111767.md): MCP TypeScript SDK: Experimental tasks were not tied to the session that created them (CVSS 8.6, modelcontextprotocol typescript-sdk · @modelcontextprotocol…) - [CVE-2026-100134](https://cve.now/CVE-2026-100134.md): Acrobat for Edge | Out-of-bounds Write (CWE-787) (CVSS 8.8, Adobe Acrobat for Edge) - [CVE-2026-100132](https://cve.now/CVE-2026-100132.md): Acrobat for Edge | Out-of-bounds Read (CWE-125) (CVSS 4.3, Adobe Acrobat for Edge) - [CVE-2026-113808](https://cve.now/CVE-2026-113808.md): Stored XSS on SNS Enrollment Portal (CVSS 7.1, Stormshield Network Security) - [CVE-2026-113643](https://cve.now/CVE-2026-113643.md): EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorization (CVSS 5.3, EspoCRM) - [CVE-2026-97406](https://cve.now/CVE-2026-97406.md): Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting (CVSS 9.1, Xerj Console API) - [CVE-2026-113709](https://cve.now/CVE-2026-113709.md): Argo CD: A Kustomize Helm config home can run commands in the repo-server (CVSS 9.9, argoproj argo-cd) - [CVE-2026-113708](https://cve.now/CVE-2026-113708.md): Argo CD: A Kustomize remote ref can run commands in the repo-server (CVSS 9.9, argoproj argo-cd) - [CVE-2026-113672](https://cve.now/CVE-2026-113672.md): Argo CD: A Jsonnet import can read files from the repo-server (CVSS 9.9, argoproj argo-cd) - [CVE-2026-113802](https://cve.now/CVE-2026-113802.md): Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn\_file Handler (CVSS 9.3, Wavlink WL-WN530BE1-A) - [CVE-2026-111756](https://cve.now/CVE-2026-111756.md): follow-redirects array-form headers bypass cross-origin credential stripping (CVSS 8.2, follow-redirects) - [CVE-2026-105772](https://cve.now/CVE-2026-105772.md): Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId (CVSS 9.1, ADK TypeScript) - [CVE-2026-113711](https://cve.now/CVE-2026-113711.md): ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export (CVSS 7.5, apostrophecms apostrophe · @apostrophecms import-export +2) - [CVE-2026-112861](https://cve.now/CVE-2026-112861.md): WordPress Participants Database plugin \<= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.3, xnau webdesign Participants Database) - [CVE-2026-113710](https://cve.now/CVE-2026-113710.md): ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessing (CVSS 5.9, apostrophecms apostrophe · apostrophe) - [CVE-2026-113671](https://cve.now/CVE-2026-113671.md): ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF (CVSS 4.3, apostrophecms apostrophe · @apostrophecms ai-helper +1) - [CVE-2026-113669](https://cve.now/CVE-2026-113669.md): ApostropheCMS: Cross-domain session token in URL confers session takeover (CVSS 5.3, apostrophecms apostrophe · @apostrophecms passport-bridge +2) - [CVE-2026-113667](https://cve.now/CVE-2026-113667.md): ApostropheCMS: CAPTCHA response token not URL-encoded (CVSS 5.3, apostrophecms apostrophe · @apostrophecms form +5) - [CVE-2026-113668](https://cve.now/CVE-2026-113668.md): ApostropheCMS: :\_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure) (CVSS 5.3, apostrophecms apostrophe · apostrophe) - [CVE-2026-113507](https://cve.now/CVE-2026-113507.md): aaPanel common.py GetClientIp access control (CVSS 6.9, aaPanel) - [CVE-2026-113666](https://cve.now/CVE-2026-113666.md): ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service (CVSS 7.1, apostrophecms apostrophe · @apostrophecms db-connect +2) - [CVE-2026-113665](https://cve.now/CVE-2026-113665.md): ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints (CVSS 3.7, apostrophecms apostrophe · apostrophe) - [CVE-2026-113506](https://cve.now/CVE-2026-113506.md): aaPanel File Manager common.py ExecShell os command injection (CVSS 9.4, aaPanel) - [CVE-2026-113664](https://cve.now/CVE-2026-113664.md): ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test (CVSS 5.3, apostrophecms apostrophe · @apostrophecms import-export +1) - [CVE-2026-113662](https://cve.now/CVE-2026-113662.md): ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document (CVSS 5.4, apostrophecms apostrophe · @apostrophecms import-export +1) - [CVE-2026-113661](https://cve.now/CVE-2026-113661.md): ApostropheCMS: Incomplete CVE-2026-53606: \`meta http-equiv=refresh\` \`content\` still ships \`javascript:\` / \`data:\` URLs (CVSS 5.4, apostrophecms apostrophe · apostrophecms sanitize-html +1) - [CVE-2026-113660](https://cve.now/CVE-2026-113660.md): ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers (CVSS 4.3, apostrophecms apostrophe · apostrophe) - [CVE-2026-113659](https://cve.now/CVE-2026-113659.md): ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users (CVSS 6.1, apostrophecms apostrophe · apostrophe) - [CVE-2026-113658](https://cve.now/CVE-2026-113658.md): ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory (CVSS 7.5, apostrophecms apostrophe · apostrophe) - [CVE-2026-92539](https://cve.now/CVE-2026-92539.md): Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise (CVSS 6.7, Grafana Enterprise) - [CVE-2026-113657](https://cve.now/CVE-2026-113657.md): ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS) (CVSS 3.7, apostrophecms apostrophe · apostrophecms sanitize-html +1) - [CVE-2026-113656](https://cve.now/CVE-2026-113656.md): ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS (CVSS 5.3, apostrophecms apostrophe · @apostrophecms form +1) - [CVE-2026-113649](https://cve.now/CVE-2026-113649.md): ApostropheCMS: Import API bypasses publication roles for protected content (CVSS 6.5, apostrophecms apostrophe · @apostrophecms import-export +2) - [CVE-2026-113655](https://cve.now/CVE-2026-113655.md): ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization (CVSS 4.3, apostrophecms apostrophe · apostrophe) - [CVE-2026-113654](https://cve.now/CVE-2026-113654.md): ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting \ content render (CVSS 5.3, apostrophecms apostrophe · apostrophecms sanitize-html +1) - [CVE-2026-113653](https://cve.now/CVE-2026-113653.md): ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public) (CVSS 6.9, apostrophecms apostrophe · apostrophe) - [CVE-2026-113652](https://cve.now/CVE-2026-113652.md): ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true) (CVSS 5.6, apostrophecms apostrophe · apostrophecms uploadfs +1) - [CVE-2026-28330](https://cve.now/CVE-2026-28330.md): SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability (CVSS 4.6, SolarWinds Observability Self-Hosted) - [CVE-2026-28329](https://cve.now/CVE-2026-28329.md): SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) (CVSS 6.4, SolarWinds Observability Self-Hosted) - [CVE-2026-113651](https://cve.now/CVE-2026-113651.md): ApostropheCMS: Path traversal in uploadfs (CVSS 3.3, apostrophecms apostrophe · apostrophecms uploadfs +1) - [CVE-2026-113650](https://cve.now/CVE-2026-113650.md): ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced) (CVSS 5.3, apostrophecms apostrophe · apostrophecms sanitize-html +1) - [CVE-2026-28328](https://cve.now/CVE-2026-28328.md): SolarWinds Observability Self-Hosted broken authorization schema (CVSS 8.8, SolarWinds Observability Self-Hosted) - [CVE-2026-113505](https://cve.now/CVE-2026-113505.md): aaPanel Download Endpoint v2.py send\_file path traversal (CVSS 5.3, aaPanel) - [CVE-2026-28331](https://cve.now/CVE-2026-28331.md): SolarWinds Patch Manager Sensitive Information Exposure Vulnerability (CVSS 4.4, SolarWinds Patch Manager) - [CVE-2026-113648](https://cve.now/CVE-2026-113648.md): ApostropheCMS: Missing Authentication in \`cleanExport\` Route (CVSS 3.1, apostrophecms apostrophe · @apostrophecms import-export +1) - [CVE-2026-112958](https://cve.now/CVE-2026-112958.md): ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization (CVSS 5.4, apostrophecms apostrophe · apostrophe) - [CVE-2026-112957](https://cve.now/CVE-2026-112957.md): ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users (CVSS 4.3, apostrophecms apostrophe · apostrophe) - [CVE-2026-112956](https://cve.now/CVE-2026-112956.md): ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content (CVSS 6.5, apostrophecms apostrophe · @apostrophecms mport-export +1) - [CVE-2026-113703](https://cve.now/CVE-2026-113703.md): SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing (CVSS 9.1, giuseppe99barchetta SuggestArr) - [CVE-2026-112955](https://cve.now/CVE-2026-112955.md): ApostropheCMS: Import archives can exhaust server storage and deny service (CVSS 6.5, apostrophecms apostrophe · @apostrophecms import-export +1) - [CVE-2026-112954](https://cve.now/CVE-2026-112954.md): ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API (CVSS 5.3, apostrophecms apostrophe · apostrophe) - [CVE-2026-112953](https://cve.now/CVE-2026-112953.md): ApostropheCMS: Exposure of Sensitive Information via predictable export filenames (CVSS 6.0, apostrophecms apostrophe · @apostrophecms import-export +1) - [CVE-2026-112952](https://cve.now/CVE-2026-112952.md): ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user (CVSS 4.3, apostrophecms apostrophe · apostrophe) - [CVE-2026-107755](https://cve.now/CVE-2026-107755.md): Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs (CVSS 6.0, Apache Software Foundation Apache CouchDB) - [CVE-2026-90800](https://cve.now/CVE-2026-90800.md): Apache CouchDB: Auth bypass in prefixed \_users and \_replicator databases (CVSS 8.1, Apache Software Foundation Apache CouchDB) - [CVE-2026-113683](https://cve.now/CVE-2026-113683.md): VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename (CVSS 5.1, jcrodriguez-dis moodle-mod\_vpl) - [CVE-2026-113682](https://cve.now/CVE-2026-113682.md): Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password (CVSS 9.1, networknt light-4j) - [CVE-2026-113681](https://cve.now/CVE-2026-113681.md): OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read (CVSS 6.8, AcademySoftwareFoundation OpenImageIO) - [CVE-2026-113680](https://cve.now/CVE-2026-113680.md): HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoS (CVSS 6.8, harfbuzz) - [CVE-2026-113679](https://cve.now/CVE-2026-113679.md): HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font\_glyph\_to\_string (CVSS 7.3, harfbuzz) - [CVE-2026-113678](https://cve.now/CVE-2026-113678.md): Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron (CVSS 9.4, froxlor) - [CVE-2026-113677](https://cve.now/CVE-2026-113677.md): Froxlor 0.10.0 before 2.3.15 Missing Authorization via SubDomains.delete API (CVSS 5.3, froxlor) - [CVE-2026-113676](https://cve.now/CVE-2026-113676.md): Froxlor 0.10.0 before 2.3.15 Authorization Bypass via Admins.get API (CVSS 5.3, froxlor) - [CVE-2026-113613](https://cve.now/CVE-2026-113613.md): FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin (CVSS 9.2, FlexGet) - [CVE-2026-113612](https://cve.now/CVE-2026-113612.md): SparkyFitness before 0.17.0 Missing Authorization via food-variants DELETE Endpoint (CVSS 5.3, CodeWithCJ SparkyFitness) - [CVE-2026-113611](https://cve.now/CVE-2026-113611.md): Outline before 1.8.0 Information Disclosure via Orphaned Webhook Subscriptions (CVSS 6.9, outline) - [CVE-2026-113610](https://cve.now/CVE-2026-113610.md): Xen Orchestra before 6.9.0 Authorization Bypass via user.set API (CVSS 5.3, vatesfr xen-orchestra) - [CVE-2026-113609](https://cve.now/CVE-2026-113609.md): Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass for PowerShell Scripts (CVSS 4.8, Bandisoft Bandizip) - [CVE-2026-113608](https://cve.now/CVE-2026-113608.md): Configurable Reports block for Moodle before 5.3.1 SQL Injection via filter\_var (CVSS 6.0, jleyva moodle-block\_configurablereports) - [CVE-2026-113607](https://cve.now/CVE-2026-113607.md): Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get\_report\_data (CVSS 7.1, jleyva moodle-block\_configurablereports) - [CVE-2026-113606](https://cve.now/CVE-2026-113606.md): Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders (CVSS 7.1, Stirling-Tools Stirling-PDF) - [CVE-2026-113605](https://cve.now/CVE-2026-113605.md): Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database (CVSS 8.6, Stirling-Tools Stirling-PDF) - [CVE-2026-113604](https://cve.now/CVE-2026-113604.md): Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts (CVSS 6.8, NationalSecurityAgency ghidra) - [CVE-2026-113603](https://cve.now/CVE-2026-113603.md): x402 @x402/extensions 2.3.1 through 2.28.0 SIWX Payment Bypass via PaymentPayload.resource (CVSS 6.9, x402-foundation @x402/extensions · x402-foundation x402 +1) - [CVE-2026-113602](https://cve.now/CVE-2026-113602.md): json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character (CVSS 6.9, json-smart) - [CVE-2026-113601](https://cve.now/CVE-2026-113601.md): Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity (CVSS 5.3, usememos memos) - [CVE-2026-113600](https://cve.now/CVE-2026-113600.md): Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroy (CVSS 5.3, fatfreecrm fat\_free\_crm) - [CVE-2026-113599](https://cve.now/CVE-2026-113599.md): Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creation (CVSS 5.3, modoboa) - [CVE-2026-113598](https://cve.now/CVE-2026-113598.md): Modoboa before 2.8.0 IDOR via API v2 alarms bulk\_delete (CVSS 5.3, modoboa) - [CVE-2026-113597](https://cve.now/CVE-2026-113597.md): Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures (CVSS 5.3, blinkospace blinko) - [CVE-2026-113596](https://cve.now/CVE-2026-113596.md): Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIds (CVSS 2.3, webstudio-is webstudio) - [CVE-2026-113595](https://cve.now/CVE-2026-113595.md): Sharkord before 0.0.26 Missing Authorization via changeLogo tRPC Route (CVSS 5.3, sharkord) - [CVE-2026-113594](https://cve.now/CVE-2026-113594.md): Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Route (CVSS 5.3, sharkord) - [CVE-2026-113359](https://cve.now/CVE-2026-113359.md): Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique\_row\_values Endpoint (CVSS 5.3, Baserow) - [CVE-2025-71436](https://cve.now/CVE-2025-71436.md): Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag (CVSS 7.1, librdf Raptor RDF Syntax Library) - [CVE-2026-90799](https://cve.now/CVE-2026-90799.md): Apache CouchDB: Atom-table exhaustion in \_changes sequences and \_search bookmarks with specially crafted sequence values (CVSS 1.3, Apache Software Foundation Apache CouchDB) - [CVE-2026-90798](https://cve.now/CVE-2026-90798.md): Apache CouchDB: Replicator follows redirects indefinitely (CVSS 0.6, Apache Software Foundation Apache CouchDB) - [CVE-2026-90797](https://cve.now/CVE-2026-90797.md): Apache CouchDB: Pre-authentication gzip decompression bomb via POST /\_session (CVSS 7.7, Apache Software Foundation Apache CouchDB) - [CVE-2026-86471](https://cve.now/CVE-2026-86471.md): Apache CouchDB: Admin credentials leading to code execution as operating system user (CVSS 9.3, Apache Software Foundation Apache CouchDB) - [CVE-2026-112951](https://cve.now/CVE-2026-112951.md): ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix (CVSS 5.4, apostrophecms apostrophe · apostrophe) - [CVE-2026-93003](https://cve.now/CVE-2026-93003.md): NetX Duo Web HTTP server interprets request body content as HTTP header fields (CVSS 6.9, Eclipse Foundation Eclipse ThreadX - NetX Duo) - [CVE-2026-112950](https://cve.now/CVE-2026-112950.md): Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix (CVSS 5.9, vitest-dev vitest · @vitest mocker +1) - [CVE-2026-95107](https://cve.now/CVE-2026-95107.md): Module object allocation size overflow corrupts the manager object pool (CVSS 7.0, Eclipse Foundation Eclipse ThreadX) - [CVE-2026-94202](https://cve.now/CVE-2026-94202.md): Module block-pool create validates two of the four parameter words it reads (CVSS 4.8, Eclipse Foundation Eclipse ThreadX) - [CVE-2026-95108](https://cve.now/CVE-2026-95108.md): Deleting a user-mode module thread leaks its privileged kernel stack (CVSS 6.8, Eclipse Foundation Eclipse ThreadX) - [CVE-2026-112949](https://cve.now/CVE-2026-112949.md): Vitest: Code injection via unauthenticated manual mock registration (CVSS 4.7, vitest-dev vitest · @vitest mocker +1) - [CVE-2026-94024](https://cve.now/CVE-2026-94024.md): Module Manager object lookup validates one byte of a module's search name (CVSS 6.9, Eclipse Foundation Eclipse ThreadX) - [CVE-2026-94023](https://cve.now/CVE-2026-94023.md): Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion (CVSS 6.9, Eclipse Foundation Eclipse ThreadX) - [CVE-2026-95109](https://cve.now/CVE-2026-95109.md): Cortex-A7 module data validation checks only the first address of a caller-supplied range (CVSS 8.5, Eclipse Foundation Eclipse ThreadX) - [CVE-2026-94192](https://cve.now/CVE-2026-94192.md): Module object deallocation can free a live ThreadX kernel object (CVSS 8.5, Eclipse Foundation Eclipse ThreadX) - [CVE-2026-112948](https://cve.now/CVE-2026-112948.md): Vitest: Servers misapply \`server.fs.deny\`, serving \`.env\`, private keys, \`.git\`, and the API token file (CVSS 6.5, vitest-dev vitest · @vitest browser +5) - [CVE-2026-112823](https://cve.now/CVE-2026-112823.md): WordPress WP User Manager plugin \<= 2.9.25 - Broken Access Control vulnerability (CVSS 4.3, WP User Manager) - [CVE-2026-112824](https://cve.now/CVE-2026-112824.md): WordPress Bus Ticket Booking with Seat Reservation plugin \<= 5.9.7 - Broken Access Control vulnerability (CVSS 5.3, Magepeople Bus Ticket Booking with Seat Reservation) - [CVE-2026-92843](https://cve.now/CVE-2026-92843.md): Out-of-bounds Read via the TLS 1.3 Certificate extensions\_length in NetX Secure (CVSS 8.7, Eclipse Foundation Eclipse ThreadX - NetX Duo) - [CVE-2026-111843](https://cve.now/CVE-2026-111843.md): WordPress Rootblox plugin \<= 1.0.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, CozyThemes Rootblox) - [CVE-2026-112829](https://cve.now/CVE-2026-112829.md): WordPress Booktics plugin \<= 1.0.30 - Broken Access Control vulnerability (CVSS 5.3, Arraytics Booktics) - [CVE-2026-112840](https://cve.now/CVE-2026-112840.md): WordPress SureCart plugin \<= 4.9.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Brainstorm Force SureCart) - [CVE-2026-111765](https://cve.now/CVE-2026-111765.md): A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix (CVSS 7.5, a2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-http-…) - [CVE-2026-112947](https://cve.now/CVE-2026-112947.md): Vite: First 4 bytes of files outside of \`server.fs\` setting is exposed by \`?vite-wasm-instance\` (CVSS 6.3, vitejs vite · vitejs vite-plus +2) - [CVE-2026-112836](https://cve.now/CVE-2026-112836.md): WordPress VikRentCar plugin \<= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8, e4jvikwp VikRentCar) - [CVE-2026-92853](https://cve.now/CVE-2026-92853.md): Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure (CVSS 8.7, Eclipse Foundation Eclipse ThreadX - NetX Duo) - [CVE-2026-94018](https://cve.now/CVE-2026-94018.md): NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path (CVSS 8.8, Eclipse Foundation Eclipse ThreadX - NetX Duo) - [CVE-2026-109700](https://cve.now/CVE-2026-109700.md): WordPress Meta Box – WordPress Custom Fields Framework plugin \<= 5.15.2 - Broken Access Control vulnerability (CVSS 6.5, eLightUp Meta Box – WordPress Custom Fields Framework) - [CVE-2026-111764](https://cve.now/CVE-2026-111764.md): A2A Java SDK has a fail-open default task authorization (CVSS 7.5, a2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-serve…) - [CVE-2026-93475](https://cve.now/CVE-2026-93475.md): Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509 (CVSS 9.3, Eclipse Foundation Eclipse ThreadX - NetX Duo) - [CVE-2026-112946](https://cve.now/CVE-2026-112946.md): Vite: Files outside \`server.fs.allow\` could be served when project paths match system paths on non-Windows machine (CVSS 6.3, vitejs vite · vitejs vite-plus +2) - [CVE-2026-111763](https://cve.now/CVE-2026-111763.md): A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect (CVSS 5.7, a2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-parent) - [CVE-2026-91057](https://cve.now/CVE-2026-91057.md): Out-of-bounds read when a multi-line text view string ends with a carriage return (CVSS 4.6, Eclipse Foundation Eclipse ThreadX - GUIX) - [CVE-2026-112945](https://cve.now/CVE-2026-112945.md): Vite: Cross origin script execution through Vite custom middleware (CVSS 2.1, vitejs vite · vitejs vite-plus +2) - [CVE-2026-92454](https://cve.now/CVE-2026-92454.md): JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode (CVSS 6.1, Eclipse Foundation Eclipse ThreadX - GUIX) - [CVE-2026-112944](https://cve.now/CVE-2026-112944.md): launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors (CVSS 6.3, vitejs launch-editor · vitejs vite +4) - [CVE-2026-111762](https://cve.now/CVE-2026-111762.md): A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure (CVSS 5.7, a2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-trans…) - [CVE-2026-111761](https://cve.now/CVE-2026-111761.md): A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery (CVSS 5.8, a2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-serve…) - [CVE-2026-91059](https://cve.now/CVE-2026-91059.md): JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size (CVSS 6.8, Eclipse Foundation Eclipse ThreadX - GUIX) - [CVE-2026-112834](https://cve.now/CVE-2026-112834.md): WordPress Seriously Simple Podcasting plugin \<= 3.17.0 - Broken Access Control vulnerability (CVSS 5.3, Castos Seriously Simple Podcasting) - [CVE-2026-91189](https://cve.now/CVE-2026-91189.md): GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme (CVSS 7.1, Eclipse Foundation Eclipse ThreadX - GUIX) - [CVE-2026-112943](https://cve.now/CVE-2026-112943.md): launch-editor: escapeCmdArgs() omits % escaping on Windows (CVSS 6.3, vitejs launch-editor · vitejs vite +4) - [CVE-2026-112833](https://cve.now/CVE-2026-112833.md): WordPress Seriously Simple Podcasting plugin \<= 3.17.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Castos Seriously Simple Podcasting) - [CVE-2026-92446](https://cve.now/CVE-2026-92446.md): GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader (CVSS 6.8, Eclipse Foundation Eclipse ThreadX - GUIX) - [CVE-2026-92449](https://cve.now/CVE-2026-92449.md): Binary resource loader: unbounded map\_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena (CVSS 6.8, Eclipse Foundation Eclipse ThreadX - GUIX) - [CVE-2026-112942](https://cve.now/CVE-2026-112942.md): launch-editor: \`fs.existsSync()\` existence check can be bypassed on Windows (CVSS 7.5, vitejs launch-editor · vitejs vite +4) - [CVE-2026-91186](https://cve.now/CVE-2026-91186.md): PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write (CVSS 8.4, Eclipse Foundation Eclipse ThreadX - GUIX) - [CVE-2026-113466](https://cve.now/CVE-2026-113466.md): MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key (CVSS 6.9, MinIO) - [CVE-2026-112941](https://cve.now/CVE-2026-112941.md): filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock (CVSS 3.3, tox-dev filelock · filelock) - [CVE-2026-112940](https://cve.now/CVE-2026-112940.md): filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files (CVSS 7.1, tox-dev filelock · filelock) - [CVE-2026-92162](https://cve.now/CVE-2026-92162.md): Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream (CVSS 7.2, flatpak) - [CVE-2026-112939](https://cve.now/CVE-2026-112939.md): filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker (CVSS 4.7, tox-dev filelock · filelock) - [CVE-2026-112937](https://cve.now/CVE-2026-112937.md): filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-\* link directory name (CVSS 6.1, tox-dev filelock · filelock) - [CVE-2026-95111](https://cve.now/CVE-2026-95111.md): Module queue front-send validates a word count as a byte count (CVSS 4.8, Eclipse Foundation Eclipse ThreadX) - [CVE-2026-112936](https://cve.now/CVE-2026-112936.md): filelock: ReadWriteLock follows a symlink at the lock path into SQLite (CVSS 6.1, tox-dev filelock · filelock) - [CVE-2026-112935](https://cve.now/CVE-2026-112935.md): filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders (CVSS 4.7, tox-dev filelock · filelock) - [CVE-2026-96402](https://cve.now/CVE-2026-96402.md): USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count (CVSS 5.2, Eclipse Foundation Eclipse ThreadX - USBX) - [CVE-2026-112934](https://cve.now/CVE-2026-112934.md): filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record (CVSS 6.1, tox-dev filelock · filelock) - [CVE-2026-113411](https://cve.now/CVE-2026-113411.md): Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme (CVSS 5.3, Nerimity Desktop) - [CVE-2026-112915](https://cve.now/CVE-2026-112915.md): filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout (CVSS 5.5, tox-dev filelock · filelock) - [CVE-2026-112914](https://cve.now/CVE-2026-112914.md): filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory (CVSS 5.3, tox-dev filelock · filelock) - [CVE-2026-112912](https://cve.now/CVE-2026-112912.md): filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker (CVSS 2.5, tox-dev filelock · filelock) - [CVE-2026-112911](https://cve.now/CVE-2026-112911.md): filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion (CVSS 6.3, tox-dev filelock · filelock) - [CVE-2026-112909](https://cve.now/CVE-2026-112909.md): filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path (CVSS 6.1, tox-dev filelock · filelock) - [CVE-2026-113397](https://cve.now/CVE-2026-113397.md): DrayTek Vigor2960 IPsec mainfunction.cgi ruequest\_certificate command injection (CVSS 5.3, DrayTek Vigor2960) - [CVE-2026-112906](https://cve.now/CVE-2026-112906.md): filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse (CVSS 4.7, tox-dev filelock · filelock) - [CVE-2026-97400](https://cve.now/CVE-2026-97400.md): jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader) (CVSS 6.8, Eclipse Foundation Eclipse OpenJ9) - [CVE-2026-113396](https://cve.now/CVE-2026-113396.md): DrayTek Vigor2960 Rename Table mainfunction.cgi rename\_table command injection (CVSS 5.3, DrayTek Vigor2960) - [CVE-2026-103119](https://cve.now/CVE-2026-103119.md): Apache Tomcat: AJP response mix-up (CVSS 9.1, Apache Software Foundation Apache Tomcat) - [CVE-2026-101356](https://cve.now/CVE-2026-101356.md): Apache Tomcat: HTTP/2 request/response mix-up after error during async processing (CVSS 9.1, Apache Software Foundation Apache Tomcat) - [CVE-2026-101296](https://cve.now/CVE-2026-101296.md): Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms (CVSS 9.1, Apache Software Foundation Apache Tomcat) - [CVE-2026-113395](https://cve.now/CVE-2026-113395.md): DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal (CVSS 5.3, DrayTek Vigor2960) - [CVE-2026-93446](https://cve.now/CVE-2026-93446.md): Apache Tomcat: Possible TLS 1.3 connection failures (CVSS 7.5, Apache Software Foundation Apache Tomcat) - [CVE-2026-88041](https://cve.now/CVE-2026-88041.md): Apache Tomcat: HTTP/2 trailer header cross-contamination (CVSS 7.5, Apache Software Foundation Apache Tomcat) - [CVE-2026-80353](https://cve.now/CVE-2026-80353.md): Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector (CVSS 8.1, Apache Software Foundation Apache Tomcat) - [CVE-2026-74049](https://cve.now/CVE-2026-74049.md): Apache Tomcat: Jasper JSTL \ plug-in implementation omits page abort (SKIP\_PAGE) (CVSS 6.1, Apache Software Foundation Apache Tomcat) - [CVE-2026-74048](https://cve.now/CVE-2026-74048.md): Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up (CVSS 6.5, Apache Software Foundation Apache Tomcat) - [CVE-2026-113394](https://cve.now/CVE-2026-113394.md): DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal (CVSS 5.3, DrayTek Vigor2960) - [CVE-2026-96406](https://cve.now/CVE-2026-96406.md): VIDEO class descriptor walk consumes device-controlled wTotalLength as its bound (CVSS 4.9, Eclipse Foundation Eclipse ThreadX - USBX) - [CVE-2026-113393](https://cve.now/CVE-2026-113393.md): DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload (CVSS 5.3, DrayTek Vigor2960) - [CVE-2026-96582](https://cve.now/CVE-2026-96582.md): Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser (CVSS 4.9, Eclipse Foundation Eclipse ThreadX - USBX) - [CVE-2026-91041](https://cve.now/CVE-2026-91041.md): FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image (CVSS 7.8, Eclipse Foundation Eclipse ThreadX - FileX) - [CVE-2026-113392](https://cve.now/CVE-2026-113392.md): DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal (CVSS 5.3, DrayTek Vigor2960) - [CVE-2026-105941](https://cve.now/CVE-2026-105941.md): Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname (CVSS 8.1, Red Hat streams for Apache Kafka) - [CVE-2026-113401](https://cve.now/CVE-2026-113401.md): Denial-of-service in the PDF Viewer component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2026-113400](https://cve.now/CVE-2026-113400.md): Uninitialized memory in the Audio/Video: cubeb component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2026-113399](https://cve.now/CVE-2026-113399.md): Incorrect boundary conditions in the SVG component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2026-113470](https://cve.now/CVE-2026-113470.md): Cryptographic issue in the Security Block-lists, Allow-lists, and other State component (CVSS 5.4, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2026-113391](https://cve.now/CVE-2026-113391.md): DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection (CVSS 9.4, DrayTek Vigor2960) - [CVE-2026-113620](https://cve.now/CVE-2026-113620.md): Eclipse ioFog operator WebSocket accepts an unverified JWT (CVSS 9.8, Eclipse Foundation Eclipse ioFog) - [CVE-2026-113390](https://cve.now/CVE-2026-113390.md): DrayTek Vigor2960 CGI mainfunction.cgi sub\_182B0 os command injection (CVSS 9.4, DrayTek Vigor2960) - [CVE-2026-113619](https://cve.now/CVE-2026-113619.md): Eclipse ioFog renders request templates before authentication (CVSS 7.5, Eclipse Foundation Eclipse ioFog) - [CVE-2026-34485](https://cve.now/CVE-2026-34485.md): A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX) (CVSS 7.8, Nokia 1830 Global Express) - [CVE-2026-34484](https://cve.now/CVE-2026-34484.md): A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX) (CVSS 6.7, Nokia 1830 Global Express) - [CVE-2026-113389](https://cve.now/CVE-2026-113389.md): DrayTek Vigor2960 CGI Process mainfunction.cgi set\_table command injection (CVSS 9.4, DrayTek Vigor2960) - [CVE-2026-113388](https://cve.now/CVE-2026-113388.md): opensource-socialnetwork Cache Settings dynamic.php input code injection (CVSS 4.8, opensource-socialnetwork) - [CVE-2026-113583](https://cve.now/CVE-2026-113583.md): Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.js (CVSS 5.3, cypht-org cypht) - [CVE-2026-105949](https://cve.now/CVE-2026-105949.md): Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints (CVSS 8.8, Cruise Control for Apache Kafka · Red Hat streams for Apach…) - [CVE-2026-105312](https://cve.now/CVE-2026-105312.md): Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation (CVSS 9.9, Red Hat StreamsHub Console for Apache Kafka® · Red Hat stre…) - [CVE-2026-105311](https://cve.now/CVE-2026-105311.md): Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputy (CVSS 7.7, Red Hat StreamsHub Console for Apache Kafka® · Red Hat stre…) - [CVE-2026-18205](https://cve.now/CVE-2026-18205.md): XSS in Ticimax Informatics' Ticimax E-Commerce Platform (CVSS 6.1, Ticimax Informatics Technologies Ticimax E-Commerce Platform) - [CVE-2026-113385](https://cve.now/CVE-2026-113385.md): LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Class.forName improper export of android application components (CVSS 4.8, LeeDrOiD Labs Shortcutter 2 App) - [CVE-2026-113496](https://cve.now/CVE-2026-113496.md): Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments (CVSS 5.0, Red Hat Enterprise Linux) - [CVE-2026-113495](https://cve.now/CVE-2026-113495.md): Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments (CVSS 5.0, Red Hat Enterprise Linux) - [CVE-2026-14933](https://cve.now/CVE-2026-14933.md): Unblu Spark Cross-Site Scripting in Embedded Co-Browsing (CVSS 8.6, Unblu Spark) - [CVE-2026-9589](https://cve.now/CVE-2026-9589.md): Unblu Spark Authorization Bypass in Configuration Cascade Operations (CVSS 9.3, Unblu Spark) - [CVE-2026-113384](https://cve.now/CVE-2026-113384.md): Optimal IdM OptimalCloud social redirect (CVSS 5.3, Optimal IdM OptimalCloud) - [CVE-2026-113383](https://cve.now/CVE-2026-113383.md): Optimal IdM OptimalCloud Login cross site scripting (CVSS 5.3, Optimal IdM OptimalCloud) - [CVE-2026-113358](https://cve.now/CVE-2026-113358.md): LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes (CVSS 8.7, lavalite cms) - [CVE-2026-113357](https://cve.now/CVE-2026-113357.md): @e2e-dev/github before 0.4.1 CI Report Hijacking via Predictable Comment Marker (CVSS 5.1, tester-army @e2e-dev/github) - [CVE-2026-113356](https://cve.now/CVE-2026-113356.md): DokuWiki before 2026-07-14c PHP Object Injection via Draft Race Condition (CVSS 7.7, DokuWiki) - [CVE-2026-113355](https://cve.now/CVE-2026-113355.md): Chatwoot before 4.14.0 Stored XSS via Help Center Video Embed Links (CVSS 4.8, chatwoot) - [CVE-2026-113354](https://cve.now/CVE-2026-113354.md): Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content (CVSS 7.1, Finsys dockhand) - [CVE-2026-113353](https://cve.now/CVE-2026-113353.md): LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers (CVSS 5.3, ThimPress LearnPress) - [CVE-2026-113352](https://cve.now/CVE-2026-113352.md): uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers (CVSS 7.7, uTox) - [CVE-2026-113351](https://cve.now/CVE-2026-113351.md): libexpat 2.7.2 through 2.9.0 Denial of Service via XML\_ParserReset (CVSS 8.2, libexpat) - [CVE-2026-113350](https://cve.now/CVE-2026-113350.md): react-admin before 5.15.5 Stored XSS via UrlField and FileField (CVSS 5.1, marmelab react-admin) - [CVE-2026-113349](https://cve.now/CVE-2026-113349.md): OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent (CVSS 5.3, OpenCATS) - [CVE-2026-112787](https://cve.now/CVE-2026-112787.md): OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports (CVSS 5.3, OpenCATS) - [CVE-2026-112786](https://cve.now/CVE-2026-112786.md): OpenCATS before 0.10.0 Missing Authorization via Import Revert Action (CVSS 5.3, OpenCATS) - [CVE-2026-112785](https://cve.now/CVE-2026-112785.md): OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints (CVSS 5.3, OpenCATS) - [CVE-2026-112784](https://cve.now/CVE-2026-112784.md): OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php (CVSS 5.3, OpenCATS) - [CVE-2026-112783](https://cve.now/CVE-2026-112783.md): OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints (CVSS 5.3, OpenCATS) - [CVE-2026-108089](https://cve.now/CVE-2026-108089.md): Apache Cocoon: Unauthenticated access to diagnostic interfaces (CVSS 7.5, Apache Software Foundation Apache Cocoon) - [CVE-2026-108088](https://cve.now/CVE-2026-108088.md): Apache Cocoon: Cross-user cache poisoning (CVSS 7.5, Apache Software Foundation Apache Cocoon) - [CVE-2026-108087](https://cve.now/CVE-2026-108087.md): Apache Cocoon: SQL Injection (CVSS 8.8, Apache Software Foundation Apache Cocoon) - [CVE-2026-108086](https://cve.now/CVE-2026-108086.md): Apache Cocoon: XEE could lead to SSRF and information disclosure (CVSS 7.5, Apache Software Foundation Apache Cocoon) - [CVE-2026-113382](https://cve.now/CVE-2026-113382.md): arizu-id fast-tunnel Plugin Installer api\_plugins.php extractTo unrestricted upload (CVSS 5.3, arizu-id fast-tunnel) - [CVE-2026-107597](https://cve.now/CVE-2026-107597.md): jwks\_uri from the OIDC discovery document is fetched without checking its origin or scheme (CVSS 5.1, Eclipse Foundation Eclipse CSI - PIA) - [CVE-2026-108062](https://cve.now/CVE-2026-108062.md): Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop (CVSS 6.9, Eclipse Foundation Eclipse CSI - PIA) - [CVE-2026-111844](https://cve.now/CVE-2026-111844.md): WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Brizy) - [CVE-2026-113381](https://cve.now/CVE-2026-113381.md): Osclass Item Model Item.php findUserItems sql injection (CVSS 6.9, Osclass) - [CVE-2026-112069](https://cve.now/CVE-2026-112069.md): Broken Access Control in extension "FAL Protect" (fal\_protect) (CVSS 6.3, TYPO3 Extension "FAL Protect") - [CVE-2026-112065](https://cve.now/CVE-2026-112065.md): Missing Authorization in extension "sgalinski Cookie Consent" (sg\_cookie\_optin) (CVSS 5.3, TYPO3 Extension "sgalinski Cookie Consent") - [CVE-2026-112064](https://cve.now/CVE-2026-112064.md): SQL Injection in extension "sgalinski Cookie Consent" (sg\_cookie\_optin) (CVSS 7.1, TYPO3 Extension "sgalinski Cookie Consent") - [CVE-2026-112066](https://cve.now/CVE-2026-112066.md): Missing Authorization in extension "sgalinski Cookie Consent" (sg\_cookie\_optin) (CVSS 7.1, TYPO3 Extension "sgalinski Cookie Consent") - [CVE-2026-112067](https://cve.now/CVE-2026-112067.md): Captcha Bypass in extension "Accessible Form Captcha" (bw\_captcha) (CVSS 6.9, TYPO3 Extension "Accessible Form Captcha") - [CVE-2026-112068](https://cve.now/CVE-2026-112068.md): Insecure Direct Object Reference in extension "Analytics" (analytics) (CVSS 5.3, TYPO3 Extension "Analytics") - [CVE-2026-112237](https://cve.now/CVE-2026-112237.md): Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf) (CVSS 6.9, TYPO3 Extension "Kitodo.Presentation") - [CVE-2026-112240](https://cve.now/CVE-2026-112240.md): Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid\_form) (CVSS 6.3, Extension "TYPO3 Fluid-Form by coding.ms") - [CVE-2026-113442](https://cve.now/CVE-2026-113442.md): Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid\_form) (CVSS 5.3, Extension "TYPO3 Fluid-Form by coding.ms") - [CVE-2026-112238](https://cve.now/CVE-2026-112238.md): SQL Injection in extension "File manager" (ameos\_filemanager) (CVSS 8.7, TYPO3 Extension "File manager") - [CVE-2026-112071](https://cve.now/CVE-2026-112071.md): Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop) (CVSS 6.9, Extension "TYPO3 Shop by coding.ms") - [CVE-2026-113468](https://cve.now/CVE-2026-113468.md): Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop) (CVSS 6.9, Extension "TYPO3 Shop by coding.ms") - [CVE-2026-112239](https://cve.now/CVE-2026-112239.md): Broken Access Control in extension "TYPO3 AI Integration Extension" (ns\_t3ai) (CVSS 7.2, Extension "TYPO3 AI Integration Extension") - [CVE-2026-113459](https://cve.now/CVE-2026-113459.md): Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns\_t3ai) (CVSS 7.1, Extension "TYPO3 AI Integration Extension") - [CVE-2026-112070](https://cve.now/CVE-2026-112070.md): Broken Access Control in extension "Analytics" (analytics) (CVSS 5.3, TYPO3 Extension "Analytics") - [CVE-2026-113378](https://cve.now/CVE-2026-113378.md): mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection (CVSS 4.8, mcollina mcp-ripgrep) - [CVE-2026-43858](https://cve.now/CVE-2026-43858.md): A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. (CVSS 8.6, Advantech ADAM-3600) - [CVE-2026-43857](https://cve.now/CVE-2026-43857.md): A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. (CVSS 8.6, Advantech ADAM-3600) - [CVE-2026-85267](https://cve.now/CVE-2026-85267.md): Cross-Site WebSocket Hijacking in Google Cloud Shell (CVSS 8.7, Google Cloud Cloud Shell) - [CVE-2026-43856](https://cve.now/CVE-2026-43856.md): A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arb (CVSS 8.6, Advantech ADAM-3600) - [CVE-2026-43855](https://cve.now/CVE-2026-43855.md): A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. (CVSS 7.5, Advantech ADAM-3600) - [CVE-2026-43854](https://cve.now/CVE-2026-43854.md): A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled (CVSS 6.3, Advantech ADAM-3600) - [CVE-2026-43853](https://cve.now/CVE-2026-43853.md): A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash. (CVSS 8.2, Advantech ADAM-3600) - [CVE-2026-43852](https://cve.now/CVE-2026-43852.md): A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system. (CVSS 8.2, Advantech ADAM-3600) - [CVE-2026-43851](https://cve.now/CVE-2026-43851.md): A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system. (CVSS 8.2, Advantech ADAM-3600) - [CVE-2026-43850](https://cve.now/CVE-2026-43850.md): A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. (CVSS 8.6, Advantech ADAM-3600) - [CVE-2026-43849](https://cve.now/CVE-2026-43849.md): A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. (CVSS 6.9, Advantech ADAM-3600) - [CVE-2026-43848](https://cve.now/CVE-2026-43848.md): A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. (CVSS 6.9, Advantech ADAM-3600) - [CVE-2026-43847](https://cve.now/CVE-2026-43847.md): A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even whe (CVSS 8.2, Advantech ADAM-3600) - [CVE-2026-43846](https://cve.now/CVE-2026-43846.md): A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution. (CVSS 8.6, Advantech ADAM-3600) - [CVE-2026-43845](https://cve.now/CVE-2026-43845.md): A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism. (CVSS 9.2, Advantech ADAM-3600) - [CVE-2026-43844](https://cve.now/CVE-2026-43844.md): A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism. (CVSS 9.3, Advantech ADAM-3600) - [CVE-2026-43843](https://cve.now/CVE-2026-43843.md): An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. (CVSS 6.9, Advantech ADAM-3600) - [CVE-2026-43842](https://cve.now/CVE-2026-43842.md): A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the (CVSS 6.9, Advantech ADAM-3600) - [CVE-2026-43841](https://cve.now/CVE-2026-43841.md): A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the (CVSS 6.9, Advantech ADAM-3600) - [CVE-2026-113469](https://cve.now/CVE-2026-113469.md): Improper Signature Verification of Active Update Files (CVSS 7.5, Stormshield Network Security) - [CVE-2026-43840](https://cve.now/CVE-2026-43840.md): A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the (CVSS 6.9, Advantech ADAM-3600) - [CVE-2026-43839](https://cve.now/CVE-2026-43839.md): A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service. (CVSS 8.7, Advantech ADAM-3600) - [CVE-2026-101201](https://cve.now/CVE-2026-101201.md): QBinaryJson::fromBinaryData() integer overflow leading to OOB read (CVSS 4.3, qt) - [CVE-2026-43838](https://cve.now/CVE-2026-43838.md): A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution. (CVSS 9.2, Advantech ADAM-3600) - [CVE-2026-92287](https://cve.now/CVE-2026-92287.md): Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation (CVSS 8.1, Apache Software Foundation Apache Arrow C++ · Apache Softwa…) - [CVE-2026-43837](https://cve.now/CVE-2026-43837.md): A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code (CVSS 7.5, Advantech ADAM-3600) - [CVE-2026-11960](https://cve.now/CVE-2026-11960.md): Multiple vulnerabilities in FacturaScripts (CVSS 6.9, FacturaScripts) - [CVE-2026-11959](https://cve.now/CVE-2026-11959.md): Multiple vulnerabilities in FacturaScripts (CVSS 6.9, FacturaScripts) - [CVE-2026-113465](https://cve.now/CVE-2026-113465.md): Possible DOM XSS in SNS Web Administration Portal (CVSS 6.6, Stormshield Network Security) - [CVE-2026-43836](https://cve.now/CVE-2026-43836.md): A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges. (CVSS 9.3, Advantech ADAM-3600) - [CVE-2026-43835](https://cve.now/CVE-2026-43835.md): A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potent (CVSS 8.6, Advantech ADAM-3600) - [CVE-2026-43834](https://cve.now/CVE-2026-43834.md): A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executi (CVSS 7.5, Advantech ADAM-3600) - [CVE-2024-2323](https://cve.now/CVE-2024-2323.md): Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery (CVSS 4.8, WSO2 Enterprise Integrator · WSO2 Identity Server +4) - [CVE-2026-111090](https://cve.now/CVE-2026-111090.md): Improper Signature Verification of Firmware Update Files (CVSS 7.8, Stormshield Network Security) - [CVE-2026-112177](https://cve.now/CVE-2026-112177.md): Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8 (CVSS 7.3, Red Hat Enterprise Linux) - [CVE-2026-113407](https://cve.now/CVE-2026-113407.md): YS-infoware｜BA-Workflow - SQL Injection (CVSS 8.7, YS-infoware BA-Workflow) - [CVE-2026-113406](https://cve.now/CVE-2026-113406.md): YS-infoware｜BA-Workflow - SQL Injection (CVSS 8.7, YS-infoware BA-Workflow) - [CVE-2026-113405](https://cve.now/CVE-2026-113405.md): YS-infoware｜BA-Workflow - SQL Injection (CVSS 8.7, YS-infoware BA-Workflow) - [CVE-2026-110725](https://cve.now/CVE-2026-110725.md): fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references (CVSS 3.7, fast-uri) - [CVE-2026-113403](https://cve.now/CVE-2026-113403.md): ArmorX Global Technology｜ArmorX Spam - Command Injection (CVSS 7.1, ArmorX Global Technology ArmorX Spam) - [CVE-2026-110306](https://cve.now/CVE-2026-110306.md): fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding (CVSS 6.1, fast-uri) - [CVE-2026-110180](https://cve.now/CVE-2026-110180.md): fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization (CVSS 4.8, fast-uri) - [CVE-2026-110095](https://cve.now/CVE-2026-110095.md): fast-uri vulnerable to improper path equivalence in relative reference normalization (CVSS 3.7, fast-uri) - [CVE-2026-93878](https://cve.now/CVE-2026-93878.md): DiviGear Carousel \<= 5.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via update\_license AJAX Action (CVSS 6.4, DiviGear Carousel) - [CVE-2026-112148](https://cve.now/CVE-2026-112148.md): A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an (CVSS 5.1, LY LIFF SDK) - [CVE-2026-113402](https://cve.now/CVE-2026-113402.md): ArmorX Global Technology｜ArmorX Spam - Local File Inclusion (CVSS 7.1, ArmorX Global Technology ArmorX Spam) - [CVE-2026-113404](https://cve.now/CVE-2026-113404.md): Uniong｜WebITR - Insecure Deserialization (CVSS 8.7, Uniong WebITR) - [CVE-2026-96903](https://cve.now/CVE-2026-96903.md): Easy Property Listings \< 3.5.27 - Subscriber+ Sensitive Data Disclosure via Contact CRM AJAX Handlers (CVSS 4.3, Easy Property Listings) - [CVE-2026-96902](https://cve.now/CVE-2026-96902.md): Easy Property Listings \< 3.5.28 - Unauthenticated Hidden Listing Details Disclosure via REST API (CVSS 5.3, Easy Property Listings) - [CVE-2026-93300](https://cve.now/CVE-2026-93300.md): EventON - Subscriber \<= 1.4.5 - Unauthenticated SQL Injection via 'email' Parameter (CVSS 7.5, EventON - Subscriber) - [CVE-2026-97627](https://cve.now/CVE-2026-97627.md): Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. (CVSS 7.2, Atsumi Electric Co. ADX5004 · Atsumi Electric Co. ADX5008 +8) - [CVE-2026-100737](https://cve.now/CVE-2026-100737.md): Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. (CVSS 4.9, Atsumi Electric Co. ADX5004 · Atsumi Electric Co. ADX5008 +8) - [CVE-2026-113386](https://cve.now/CVE-2026-113386.md): Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. (CVSS 7.1, Roundcube Webmail) - [CVE-2026-109831](https://cve.now/CVE-2026-109831.md): UnRTF by GNU Project is vulnerable to out-of-bounds write. (CVSS 5.4, GNU Project UnRTF) - [CVE-2026-113380](https://cve.now/CVE-2026-113380.md): In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup… (CVSS 9.3, Signal RingRTC) - [CVE-2026-86467](https://cve.now/CVE-2026-86467.md): Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account (CVSS 8.8, Apache Software Foundation Apache Airflow Amazon provider) - [CVE-2026-12489](https://cve.now/CVE-2026-12489.md): An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could al (CVSS 6.5, Zyxel EX3501-T0 firmware) - [CVE-2026-75753](https://cve.now/CVE-2026-75753.md): Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTT (CVSS 5.3, ASUS Router) - [CVE-2026-17518](https://cve.now/CVE-2026-17518.md): Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations (CVSS 8.2, ASUS Router) - [CVE-2026-102438](https://cve.now/CVE-2026-102438.md): An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges (CVSS 8.5, ASUS Armoury Crate) - [CVE-2026-105299](https://cve.now/CVE-2026-105299.md): Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments (CVSS 8.7, https://github.com/cloudflare/pingora · pingora-proxy) - [CVE-2026-86981](https://cve.now/CVE-2026-86981.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 5.5, Apple macOS) - [CVE-2026-86979](https://cve.now/CVE-2026-86979.md): A privacy issue was addressed with improved checks. (CVSS 5.5, Apple macOS) - [CVE-2026-86977](https://cve.now/CVE-2026-86977.md): An authorization issue was addressed with improved network restrictions. (CVSS 7.5, Apple iOS and iPadOS) - [CVE-2026-86976](https://cve.now/CVE-2026-86976.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS) - [CVE-2026-86975](https://cve.now/CVE-2026-86975.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 4.3, Apple iOS and iPadOS · Apple macOS +3) - [CVE-2026-86963](https://cve.now/CVE-2026-86963.md): A denial-of-service issue was addressed with improved input validation. (CVSS 5.9, Apple iOS and iPadOS) - [CVE-2026-86962](https://cve.now/CVE-2026-86962.md): A double free issue was addressed with improved memory management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3) - [CVE-2026-86961](https://cve.now/CVE-2026-86961.md): A race condition was addressed with additional validation. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS) - [CVE-2026-86959](https://cve.now/CVE-2026-86959.md): An input validation issue was addressed with improved input validation. (CVSS 4.3, Apple iOS and iPadOS · Apple macOS) - [CVE-2026-86957](https://cve.now/CVE-2026-86957.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3) - [CVE-2026-86955](https://cve.now/CVE-2026-86955.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS) - [CVE-2026-86953](https://cve.now/CVE-2026-86953.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 4.6, Apple iOS and iPadOS · Apple macOS +3) - [CVE-2026-86949](https://cve.now/CVE-2026-86949.md): This issue was addressed by enforcing library validation on the affected binaries. (CVSS 8.8, Apple Xcode) - [CVE-2026-86948](https://cve.now/CVE-2026-86948.md): This issue was addressed by enforcing library validation on the affected binaries. (CVSS 7.8, Apple Xcode) - [CVE-2026-86944](https://cve.now/CVE-2026-86944.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS) - [CVE-2026-86940](https://cve.now/CVE-2026-86940.md): This issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple macOS) - [CVE-2026-86935](https://cve.now/CVE-2026-86935.md): This issue was addressed by removing additional entitlements. (CVSS 5.5, Apple macOS) - [CVE-2026-86933](https://cve.now/CVE-2026-86933.md): A permissions issue was addressed with additional sandbox restrictions. (CVSS 3.3, Apple macOS) - [CVE-2026-86932](https://cve.now/CVE-2026-86932.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS) - [CVE-2026-86928](https://cve.now/CVE-2026-86928.md): A path handling issue was addressed with improved validation. (CVSS 5.5, Apple macOS) - [CVE-2026-86922](https://cve.now/CVE-2026-86922.md): A type confusion issue was addressed with improved state management. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +2) - [CVE-2026-86921](https://cve.now/CVE-2026-86921.md): A permissions issue was addressed with improved validation. (CVSS 6.2, Apple iOS and iPadOS · Apple macOS +1) - [CVE-2026-86919](https://cve.now/CVE-2026-86919.md): A stack overflow was addressed with improved input validation. (CVSS 8.8, Apple iOS and iPadOS · Apple macOS +1) - [CVE-2026-86918](https://cve.now/CVE-2026-86918.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 4.3, Apple iOS and iPadOS · Apple macOS +3) - [CVE-2026-86915](https://cve.now/CVE-2026-86915.md): A race condition was addressed with improved locking. (CVSS 4.7, Apple macOS) - [CVE-2026-86914](https://cve.now/CVE-2026-86914.md): An information disclosure issue was addressed with improved state management. (CVSS 5.5, Apple macOS) - [CVE-2026-86913](https://cve.now/CVE-2026-86913.md): A use after free issue was addressed with improved memory management. (CVSS 5.4, Apple iOS and iPadOS · Apple macOS +3) - [CVE-2026-86907](https://cve.now/CVE-2026-86907.md): An authorization issue was addressed with improved entitlement checks. (CVSS 4.4, Apple macOS) - [CVE-2026-86875](https://cve.now/CVE-2026-86875.md): An input validation issue was addressed with improved input validation. (CVSS 4.3, Apple Xcode) - [CVE-2026-86874](https://cve.now/CVE-2026-86874.md): An out-of-bounds read was addressed with improved input validation. (CVSS 3.3, Apple Xcode) - [CVE-2026-86872](https://cve.now/CVE-2026-86872.md): A logic issue was addressed with improved state management. (CVSS 5.4, Apple Safari · Apple visionOS +1) - [CVE-2026-86871](https://cve.now/CVE-2026-86871.md): An integer underflow was addressed with improved input validation. (CVSS 5.9, Apple macOS) - [CVE-2026-86868](https://cve.now/CVE-2026-86868.md): An authentication issue was addressed with improved state management. (CVSS 9.1, Apple macOS) - [CVE-2026-84613](https://cve.now/CVE-2026-84613.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +3) - [CVE-2026-84582](https://cve.now/CVE-2026-84582.md): A privacy issue was addressed with improved access restrictions. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3) - [CVE-2026-84579](https://cve.now/CVE-2026-84579.md): A logic issue was addressed with improved checks. (no CVSS, Apple macOS) - [CVE-2026-84547](https://cve.now/CVE-2026-84547.md): A memory corruption issue was addressed with improved input validation. (CVSS 3.5, Apple macOS) - [CVE-2026-84508](https://cve.now/CVE-2026-84508.md): This issue was addressed with improved validation of the caller's access. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1) - [CVE-2026-84490](https://cve.now/CVE-2026-84490.md): This issue was addressed through improved state management. (CVSS 2.0, Apple iOS and iPadOS) - [CVE-2026-65396](https://cve.now/CVE-2026-65396.md): A buffer overflow was addressed with improved size validation. (CVSS 5.5, Apple macOS) - [CVE-2026-65379](https://cve.now/CVE-2026-65379.md): The issue was addressed with improved handling of secure input state. (CVSS 5.5, Apple macOS) - [CVE-2026-65372](https://cve.now/CVE-2026-65372.md): A race condition was addressed with additional validation. (CVSS 4.7, Apple macOS) - [CVE-2026-65356](https://cve.now/CVE-2026-65356.md): An access issue was addressed with improved access controls. (CVSS 5.5, Apple macOS) - [CVE-2026-28854](https://cve.now/CVE-2026-28854.md): The issue was addressed with additional app bundle integrity checks. (CVSS 7.5, Apple macOS) - [CVE-2026-28853](https://cve.now/CVE-2026-28853.md): The issue was addressed with improved checks. (CVSS 7.8, Apple macOS) - [CVE-2026-28850](https://cve.now/CVE-2026-28850.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS · Apple visionOS) - [CVE-2026-105298](https://cve.now/CVE-2026-105298.md): Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass (CVSS 6.3, https://github.com/cloudflare/pingora · pingora-core) - [CVE-2026-77938](https://cve.now/CVE-2026-77938.md): Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance (CVSS 7.1, letta-ai letta) - [CVE-2026-77937](https://cve.now/CVE-2026-77937.md): Letta through 0.16.8 Cross-Tenant Impersonation via user\_id Header (CVSS 8.6, letta-ai letta) - [CVE-2026-77936](https://cve.now/CVE-2026-77936.md): Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access (CVSS 9.3, letta-ai letta) - [CVE-2026-77935](https://cve.now/CVE-2026-77935.md): Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers (CVSS 8.7, coze-dev coze-studio) - [CVE-2026-77934](https://cve.now/CVE-2026-77934.md): Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner (CVSS 8.7, coze-dev coze-studio) - [CVE-2026-77933](https://cve.now/CVE-2026-77933.md): DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment (CVSS 9.3, eosphoros-ai DB-GPT) - [CVE-2026-77932](https://cve.now/CVE-2026-77932.md): DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent (CVSS 9.3, eosphoros-ai DB-GPT) - [CVE-2026-77930](https://cve.now/CVE-2026-77930.md): EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents (CVSS 9.3, EvoScientist) - [CVE-2026-77926](https://cve.now/CVE-2026-77926.md): Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool (CVSS 8.7, apconw Aix-DB) - [CVE-2026-75128](https://cve.now/CVE-2026-75128.md): Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint (CVSS 9.3, chatchat-space Langchain-Chatchat) - [CVE-2026-109444](https://cve.now/CVE-2026-109444.md): OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell\_run Prompt Injection (CVSS 9.3, Tracer-Cloud opensre) - [CVE-2026-109443](https://cve.now/CVE-2026-109443.md): JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell (CVSS 8.7, jd-opensource JoySafeter) - [CVE-2026-109442](https://cve.now/CVE-2026-109442.md): piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec\_shell (CVSS 9.3, cas-bigdatalab piflow) - [CVE-2026-109441](https://cve.now/CVE-2026-109441.md): LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge (CVSS 6.9, ginlix-ai LangAlpha) - [CVE-2026-109440](https://cve.now/CVE-2026-109440.md): LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode (CVSS 8.7, ginlix-ai LangAlpha) - [CVE-2026-109395](https://cve.now/CVE-2026-109395.md): Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder (CVSS 8.8, ning compress-lzf) - [CVE-2026-105297](https://cve.now/CVE-2026-105297.md): Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits (CVSS 7.5, https://github.com/cloudflare/pingora · pingora-core) - [CVE-2025-60475](https://cve.now/CVE-2025-60475.md): A buffer overflow in the gf\_ac4\_parser\_bs function (/media\_tools/av\_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a (CVSS 5.5) - [CVE-2025-60494](https://cve.now/CVE-2025-60494.md): A segmentation violation in the gf\_props\_equal\_internal function (/filter\_core/filter\_props.c) of GPAC Project/MP4Box before 2.5 allows atta (CVSS 5.5) - [CVE-2025-60496](https://cve.now/CVE-2025-60496.md): A Floating-Point Exception (FPE) in the reframer\_send\_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attacke (CVSS 5.5) - [CVE-2026-95168](https://cve.now/CVE-2026-95168.md): An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get\_rules\_import\_paths in thefuck/corrector.py and (CVSS 7.8) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2026-10-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.