{ "day": "2026-09-15", "boundary": "UTC calendar day", "published_count": 1426, "by_severity": { "CRITICAL": 169, "HIGH": 790, "MEDIUM": 274, "LOW": 60 }, "kev_count": 0, "exploit_reference_count": 0, "awaiting_enrichment_count": 133, "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.", "results": [ { "rank": 1, "cve_id": "CVE-2026-90847", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.02178, "epss_percentile": 0.81368, "kev": false, "kev_due_at": null, "vendor": "EFM", "product": "ipTIME C200E", "cwe": "CWE-77", "title": "EFM ipTIME C200E System Setup iux_set.cgi os command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90847" }, { "rank": 2, "cve_id": "CVE-2026-90843", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.01367, "epss_percentile": 0.70361, "kev": false, "kev_due_at": null, "vendor": "SabyasachiRana", "product": "WebMap", "cwe": "CWE-77", "title": "SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90843" }, { "rank": 3, "cve_id": "CVE-2026-62379", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01089, "epss_percentile": 0.63528, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-94", "title": "OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62379" }, { "rank": 4, "cve_id": "CVE-2026-90880", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.01044, "epss_percentile": 0.62253, "kev": false, "kev_due_at": null, "vendor": "D-Link", "product": "DSL-3782", "cwe": "CWE-74", "title": "D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90880" }, { "rank": 5, "cve_id": "CVE-2026-77853", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.01029, "epss_percentile": 0.61816, "kev": false, "kev_due_at": null, "vendor": "LITE-ON Technology Corporation", "product": "FF-RFI079I4", "cwe": "CWE-78", "title": "Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77853" }, { "rank": 6, "cve_id": "CVE-2026-46619", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00992, "epss_percentile": 0.6068, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-90", "title": "OpenAM Authentication Bypass via MSISDN LDAP Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46619" }, { "rank": 7, "cve_id": "CVE-2026-62263", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00891, "epss_percentile": 0.57492, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-502", "title": "OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62263" }, { "rank": 8, "cve_id": "CVE-2026-57141", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.0077, "epss_percentile": 0.53702, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-94", "title": "PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57141" }, { "rank": 9, "cve_id": "CVE-2026-57136", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00764, "epss_percentile": 0.53496, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-78", "title": "PraisonAI SandboxExecutor allowedCommands bypass via shell chaining", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57136" }, { "rank": 10, "cve_id": "CVE-2026-91771", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00731, "epss_percentile": 0.52388, "kev": false, "kev_due_at": null, "vendor": "wandb", "product": "wandb", "cwe": "CWE-22", "title": "Weights & Biases wandb before 0.29.0 Path Traversal via File Download", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91771" }, { "rank": 11, "cve_id": "CVE-2026-45051", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00688, "epss_percentile": 0.50848, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-502", "title": "OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45051" }, { "rank": 12, "cve_id": "CVE-2026-46623", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00669, "epss_percentile": 0.50069, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-620", "title": "OpenAM Account Takeover via Unverified Password Change in OAuth2 Module", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46623" }, { "rank": 13, "cve_id": "CVE-2026-57138", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00654, "epss_percentile": 0.49454, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-184", "title": "PraisonAI codeMode sandbox escape via Function constructor", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57138" }, { "rank": 14, "cve_id": "CVE-2026-57139", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00642, "epss_percentile": 0.4892, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-306", "title": "PraisonAI MCPServer exposes unauthenticated HTTP tools/call", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57139" }, { "rank": 15, "cve_id": "CVE-2026-45794", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00627, "epss_percentile": 0.48248, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-502", "title": "OpenAM Unsafe Java Deserialization via SNS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45794" }, { "rank": 16, "cve_id": "CVE-2026-44203", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00593, "epss_percentile": 0.46619, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-79", "title": "OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44203" }, { "rank": 17, "cve_id": "CVE-2026-44793", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00593, "epss_percentile": 0.46619, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-79", "title": "OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44793" }, { "rank": 18, "cve_id": "CVE-2026-57140", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.00564, "epss_percentile": 0.45213, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-306", "title": "PraisonAI AgentOS exposes unauthenticated agent listing and invocation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57140" }, { "rank": 19, "cve_id": "CVE-2026-45052", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00554, "epss_percentile": 0.44665, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-285", "title": "OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45052" }, { "rank": 20, "cve_id": "CVE-2026-47426", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00554, "epss_percentile": 0.44658, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-287", "title": "OpenAM OAuth Client Impersonation via JWKS Resolver Cache", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47426" }, { "rank": 21, "cve_id": "CVE-2026-48717", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00529, "epss_percentile": 0.43255, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-285", "title": "OpenAM OAuth Authorization Bypass via PKCE Challenge", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48717" }, { "rank": 22, "cve_id": "CVE-2026-57148", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00528, "epss_percentile": 0.43216, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-287", "title": "praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57148" }, { "rank": 23, "cve_id": "CVE-2026-52827", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00521, "epss_percentile": 0.42761, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-287", "title": "Kimai: Two-factor authentication bypass on the Kimai API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52827" }, { "rank": 24, "cve_id": "CVE-2026-57147", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00512, "epss_percentile": 0.42169, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-798", "title": "praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57147" }, { "rank": 25, "cve_id": "CVE-2026-91003", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00512, "epss_percentile": 0.42167, "kev": false, "kev_due_at": null, "vendor": "D-Link", "product": "DI-8300", "cwe": "CWE-119", "title": "D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91003" }, { "rank": 26, "cve_id": "CVE-2026-57133", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00508, "epss_percentile": 0.4187, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-78", "title": "PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57133" }, { "rank": 27, "cve_id": "CVE-2026-41573", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00496, "epss_percentile": 0.41172, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-90", "title": "OpenAM LDAP Injection via `_queryId` Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-41573" }, { "rank": 28, "cve_id": "CVE-2026-91001", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00484, "epss_percentile": 0.40372, "kev": false, "kev_due_at": null, "vendor": "D-Link", "product": "DI-8400", "cwe": "CWE-119", "title": "D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91001" }, { "rank": 29, "cve_id": "CVE-2026-47424", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00483, "epss_percentile": 0.40318, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-693", "title": "OpenAM Authenticated RCE via Groovy Sandbox Escape", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47424" }, { "rank": 30, "cve_id": "CVE-2026-91859", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00474, "epss_percentile": 0.39745, "kev": false, "kev_due_at": null, "vendor": "MISP", "product": "MISP", "cwe": "CWE-223", "title": "MISP Access Log Entry Overwritten by Error Controller's Second beforeFilter Pass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91859" }, { "rank": 31, "cve_id": "CVE-2026-91002", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00443, "epss_percentile": 0.37554, "kev": false, "kev_due_at": null, "vendor": "stamparm", "product": "maltrail", "cwe": "CWE-287", "title": "stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91002" }, { "rank": 32, "cve_id": "CVE-2026-57137", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00442, "epss_percentile": 0.37448, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-693", "title": "PraisonAI AgentLoop onToolCall approval runs after tool execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57137" }, { "rank": 33, "cve_id": "CVE-2026-57134", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00429, "epss_percentile": 0.36343, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-287", "title": "PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57134" }, { "rank": 34, "cve_id": "CVE-2026-45048", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00428, "epss_percentile": 0.36278, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-200", "title": "OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45048" }, { "rank": 35, "cve_id": "CVE-2026-52819", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00421, "epss_percentile": 0.35704, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-863", "title": "Kimai: Teamlead authorization bypass in GET /api/timesheets allows reading other users' timesheet records without being teamlead of the target", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52819" }, { "rank": 36, "cve_id": "CVE-2026-46498", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00414, "epss_percentile": 0.34933, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-639", "title": "OpenAM Arbitrary OAuth Token Minting via Push Registration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46498" }, { "rank": 37, "cve_id": "CVE-2026-44202", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00414, "epss_percentile": 0.34934, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-918", "title": "OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44202" }, { "rank": 38, "cve_id": "CVE-2026-52821", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00414, "epss_percentile": 0.34934, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-639", "title": "Kimai: Improper Authorization in Kimai Activity Creation with Preset Project Allows Creation Under Unauthorized Projects", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52821" }, { "rank": 39, "cve_id": "CVE-2026-57135", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00412, "epss_percentile": 0.34728, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-653", "title": "PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57135" }, { "rank": 40, "cve_id": "CVE-2026-75983", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00411, "epss_percentile": 0.34698, "kev": false, "kev_due_at": null, "vendor": "arraytics", "product": "Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce", "cwe": "CWE-269", "title": "Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75983" }, { "rank": 41, "cve_id": "CVE-2026-90881", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00409, "epss_percentile": 0.34469, "kev": false, "kev_due_at": null, "vendor": "D-Link", "product": "DIR-882", "cwe": "CWE-200", "title": "D-Link DIR-882 CGI Binary dllog.cgi main information disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90881" }, { "rank": 42, "cve_id": "CVE-2026-53660", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00404, "epss_percentile": 0.34051, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-1004", "title": "OpenAM Insecure SSO Cookie Initialization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53660" }, { "rank": 43, "cve_id": "CVE-2026-59341", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": 0.00403, "epss_percentile": 0.33903, "kev": false, "kev_due_at": null, "vendor": "Bitnami", "product": "sealed-secrets", "cwe": null, "title": "Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59341" }, { "rank": 44, "cve_id": "CVE-2026-52826", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00396, "epss_percentile": 0.33245, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-285", "title": "Kimai: Improper Authorization in Kimai Project, Customer, and Activity Rate Edit Endpoints Allows Cross-Scope Rate Manipulation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52826" }, { "rank": 45, "cve_id": "CVE-2026-52828", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00396, "epss_percentile": 0.33245, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-862", "title": "Kimai: ExportTemplate CRUD Missing Authorization Check Allows Unauthorized TEAMLEAD Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52828" }, { "rank": 46, "cve_id": "CVE-2026-91091", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00391, "epss_percentile": 0.32689, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "GPAC", "cwe": "CWE-119", "title": "GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91091" }, { "rank": 47, "cve_id": "CVE-2026-91752", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00387, "epss_percentile": 0.32252, "kev": false, "kev_due_at": null, "vendor": "GNU", "product": "libextractor", "cwe": "CWE-789", "title": "GNU libextractor before 1.15 Stack Overflow via OLE2", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91752" }, { "rank": 48, "cve_id": "CVE-2026-52822", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00387, "epss_percentile": 0.32237, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-285", "title": "Kimai: Improper Authorization in Kimai Timesheet Restart and Duplicate Allows New Timesheets After Project Access Revocation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52822" }, { "rank": 49, "cve_id": "CVE-2026-52824", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00379, "epss_percentile": 0.31444, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-1188", "title": "Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52824" }, { "rank": 50, "cve_id": "CVE-2026-91087", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00371, "epss_percentile": 0.30653, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "GPAC", "cwe": "CWE-119", "title": "GPAC Compositor media_object.c gf_mo_get_od_id use after free", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91087" }, { "rank": 51, "cve_id": "CVE-2026-52820", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00364, "epss_percentile": 0.29894, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-639", "title": "Kimai: Timesheet PATCH/POST allows assigning to project outside user's team via query_builder OR-bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52820" }, { "rank": 52, "cve_id": "CVE-2026-52825", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00364, "epss_percentile": 0.29895, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-285", "title": "Kimai: Improper Authorization in Kimai Team Member and Team Activity Assignment APIs Allows Expansion of Team Scope Beyond Authorized Visibility", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52825" }, { "rank": 53, "cve_id": "CVE-2026-17495", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00356, "epss_percentile": 0.29054, "kev": false, "kev_due_at": null, "vendor": "moment", "product": "moment", "cwe": "CWE-27", "title": "moment vulnerable to Path Traversal via crafted non-string locale name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17495" }, { "rank": 54, "cve_id": "CVE-2026-91751", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00346, "epss_percentile": 0.27893, "kev": false, "kev_due_at": null, "vendor": "flextype", "product": "flextype", "cwe": "CWE-22", "title": "Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91751" }, { "rank": 55, "cve_id": "CVE-2026-88262", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0033, "epss_percentile": 0.25972, "kev": false, "kev_due_at": null, "vendor": "bizwell", "product": "xClick", "cwe": "CWE-613", "title": "Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88262" }, { "rank": 56, "cve_id": "CVE-2025-5802", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.0033, "epss_percentile": 0.26007, "kev": false, "kev_due_at": null, "vendor": "WSO2", "product": "WSO2 API Manager", "cwe": "CWE-203", "title": "Username Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account Discovery", "url": "https://www.cve.org/CVERecord?id=CVE-2025-5802" }, { "rank": 57, "cve_id": "CVE-2026-62280", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00327, "epss_percentile": 0.25681, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenAM", "cwe": "CWE-79", "title": "OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62280" }, { "rank": 58, "cve_id": "CVE-2026-91086", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00323, "epss_percentile": 0.25263, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "GPAC", "cwe": "CWE-119", "title": "GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91086" }, { "rank": 59, "cve_id": "CVE-2026-90852", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00314, "epss_percentile": 0.24262, "kev": false, "kev_due_at": null, "vendor": "luben", "product": "zstd-jni", "cwe": "CWE-119", "title": "luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90852" }, { "rank": 60, "cve_id": "CVE-2026-90858", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00309, "epss_percentile": 0.23592, "kev": false, "kev_due_at": null, "vendor": "subhajitkhan", "product": "online-clinic-management-system", "cwe": "CWE-285", "title": "subhajitkhan online-clinic-management-system adminappview.php session_start authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90858" }, { "rank": 61, "cve_id": "CVE-2026-90878", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00303, "epss_percentile": 0.22896, "kev": false, "kev_due_at": null, "vendor": "vllm-project", "product": "vLLM", "cwe": "CWE-400", "title": "vllm-project vLLM Jinja Template Rendering completions resource consumption", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90878" }, { "rank": 62, "cve_id": "CVE-2026-91089", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00293, "epss_percentile": 0.21811, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "GPAC", "cwe": "CWE-119", "title": "GPAC base_scenegraph.c gf_node_get_name_and_id use after free", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91089" }, { "rank": 63, "cve_id": "CVE-2026-90856", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00288, "epss_percentile": 0.21355, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "College Notes Gallery Management System", "cwe": "CWE-266", "title": "SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90856" }, { "rank": 64, "cve_id": "CVE-2026-80217", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00284, "epss_percentile": 0.20892, "kev": false, "kev_due_at": null, "vendor": "LITE-ON Technology Corporation", "product": "FF-RFI079I4", "cwe": "CWE-912", "title": "Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-80217" }, { "rank": 65, "cve_id": "CVE-2026-15758", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00274, "epss_percentile": 0.19776, "kev": false, "kev_due_at": null, "vendor": "iberezansky", "product": "3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery", "cwe": "CWE-200", "title": "3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15758" }, { "rank": 66, "cve_id": "CVE-2026-81303", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00273, "epss_percentile": 0.19696, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat build of Apache Camel - HawtIO 4", "cwe": "CWE-441", "title": "Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81303" }, { "rank": 67, "cve_id": "CVE-2026-89141", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00272, "epss_percentile": 0.19596, "kev": false, "kev_due_at": null, "vendor": "tigroumeow", "product": "AI Engine – The Chatbot, AI Framework & MCP for WordPress", "cwe": "CWE-639", "title": "AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89141" }, { "rank": 68, "cve_id": "CVE-2026-90876", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00269, "epss_percentile": 0.19047, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Online Faculty Clearance System", "cwe": "CWE-74", "title": "SourceCodester Online Faculty Clearance System delete_requirement.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90876" }, { "rank": 69, "cve_id": "CVE-2025-13166", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": 0.00269, "epss_percentile": 0.19109, "kev": false, "kev_due_at": null, "vendor": "WSO2", "product": "WSO2 Identity Server", "cwe": "CWE-203", "title": "Username Enumeration via SMS OTP Flow in WSO2 Identity Server Allows User Account Discovery", "url": "https://www.cve.org/CVERecord?id=CVE-2025-13166" }, { "rank": 70, "cve_id": "CVE-2026-90849", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00266, "epss_percentile": 0.18534, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "College Notes Gallery Management System", "cwe": "CWE-74", "title": "SourceCodester College Notes Gallery Management System login.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90849" }, { "rank": 71, "cve_id": "CVE-2026-91750", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00265, "epss_percentile": 0.18449, "kev": false, "kev_due_at": null, "vendor": "Tencent", "product": "WeKnora", "cwe": "CWE-918", "title": "WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91750" }, { "rank": 72, "cve_id": "CVE-2026-90844", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.18243, "kev": false, "kev_due_at": null, "vendor": "PHPGurukul", "product": "Daily Expense Tracker System", "cwe": "CWE-74", "title": "PHPGurukul Daily Expense Tracker System Login index.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90844" }, { "rank": 73, "cve_id": "CVE-2026-90846", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.18244, "kev": false, "kev_due_at": null, "vendor": "PHPGurukul", "product": "Daily Expense Tracker System", "cwe": "CWE-74", "title": "PHPGurukul Daily Expense Tracker System forgot-password.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90846" }, { "rank": 74, "cve_id": "CVE-2026-90877", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.18237, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Online Faculty Clearance System", "cwe": "CWE-74", "title": "SourceCodester Online Faculty Clearance System update_requirement_status.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90877" }, { "rank": 75, "cve_id": "CVE-2026-90879", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.18242, "kev": false, "kev_due_at": null, "vendor": "zyx0814", "product": "FilePress", "cwe": "CWE-74", "title": "zyx0814 FilePress Publish search.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90879" }, { "rank": 76, "cve_id": "CVE-2026-91004", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.1825, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Online Faculty Clearance System", "cwe": "CWE-74", "title": "SourceCodester Online Faculty Clearance System delete_faculty1.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91004" }, { "rank": 77, "cve_id": "CVE-2026-90848", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.18296, "kev": false, "kev_due_at": null, "vendor": "Governikus", "product": "AusweisApp", "cwe": "CWE-79", "title": "Governikus AusweisApp StartPAOSResponse cross site scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90848" }, { "rank": 78, "cve_id": "CVE-2026-91851", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00261, "epss_percentile": 0.17925, "kev": false, "kev_due_at": null, "vendor": "MISP", "product": "MISP", "cwe": "CWE-697", "title": "MISP Dashboard Template ACL Bypass Due to VARCHAR-to-Integer Type Coercion in Permission Flag Comparison", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91851" }, { "rank": 79, "cve_id": "CVE-2026-90854", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00259, "epss_percentile": 0.17742, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Online Food Ordering System", "cwe": "CWE-74", "title": "SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90854" }, { "rank": 80, "cve_id": "CVE-2026-90855", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00259, "epss_percentile": 0.17737, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Online Food Ordering System", "cwe": "CWE-74", "title": "SourceCodester/katojkalemba Online Food Ordering System order.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90855" }, { "rank": 81, "cve_id": "CVE-2026-91778", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00257, "epss_percentile": 0.17498, "kev": false, "kev_due_at": null, "vendor": "Octopus Deploy", "product": "Octopus Server", "cwe": "CWE-863", "title": "In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including the Octopus Server built-in worker). Incorrect permission validation during script execution would allow the script to execute without the user possessing the required authorisation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91778" }, { "rank": 82, "cve_id": "CVE-2026-91770", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00257, "epss_percentile": 0.17535, "kev": false, "kev_due_at": null, "vendor": "gamonoid", "product": "icehrm", "cwe": "CWE-639", "title": "IceHRM before 36.0.0 Broken Access Control via Employee ID", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91770" }, { "rank": 83, "cve_id": "CVE-2026-15402", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.0025, "epss_percentile": 0.16519, "kev": false, "kev_due_at": null, "vendor": "arraytics", "product": "Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce", "cwe": "CWE-79", "title": "Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15402" }, { "rank": 84, "cve_id": "CVE-2026-91825", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00243, "epss_percentile": 0.156, "kev": false, "kev_due_at": null, "vendor": "MISP", "product": "MISP", "cwe": "CWE-862", "title": "MISP: Missing Authorization Check for Event Sharing Group When Distribution Field Is Omitted During Edit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91825" }, { "rank": 85, "cve_id": "CVE-2026-88261", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00222, "epss_percentile": 0.12872, "kev": false, "kev_due_at": null, "vendor": "bizwell", "product": "xClick", "cwe": "CWE-20", "title": "Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88261" }, { "rank": 86, "cve_id": "CVE-2026-91857", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00214, "epss_percentile": 0.11932, "kev": false, "kev_due_at": null, "vendor": "MISP", "product": "MISP", "cwe": "CWE-352", "title": "MISP: State-changing actions accessible via GET request enabling CSRF", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91857" }, { "rank": 87, "cve_id": "CVE-2026-90850", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.0021, "epss_percentile": 0.11367, "kev": false, "kev_due_at": null, "vendor": "PHPGurukul", "product": "Hostel Management System", "cwe": "CWE-79", "title": "PHPGurukul Hostel Management System manage-students.php cross site scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90850" }, { "rank": 88, "cve_id": "CVE-2026-90851", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00209, "epss_percentile": 0.11282, "kev": false, "kev_due_at": null, "vendor": "PHPGurukul", "product": "Hostel Management System", "cwe": "CWE-266", "title": "PHPGurukul Hostel Management System checklogin.php access control", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90851" }, { "rank": 89, "cve_id": "CVE-2026-90857", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00209, "epss_percentile": 0.11283, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "College Notes Gallery Management System", "cwe": "CWE-284", "title": "SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90857" }, { "rank": 90, "cve_id": "CVE-2026-91005", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00209, "epss_percentile": 0.11281, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Online Faculty Clearance System", "cwe": "CWE-284", "title": "SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91005" }, { "rank": 91, "cve_id": "CVE-2026-91846", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00207, "epss_percentile": 0.10991, "kev": false, "kev_due_at": null, "vendor": "MISP", "product": "MISP", "cwe": "CWE-639", "title": "MISP Collection Element Add Missing Authorization on Referenced Object UUID", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91846" }, { "rank": 92, "cve_id": "CVE-2026-52823", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00206, "epss_percentile": 0.10885, "kev": false, "kev_due_at": null, "vendor": "kimai", "product": "kimai", "cwe": "CWE-352", "title": "Kimai: Login CSRF in Kimai Timesheet Stop and Restart API Endpoints Allows Unauthorized State Changes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52823" }, { "rank": 93, "cve_id": "CVE-2026-91773", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00199, "epss_percentile": 0.09944, "kev": false, "kev_due_at": null, "vendor": "charmbracelet", "product": "soft-serve", "cwe": "CWE-639", "title": "Soft Serve 0.7.1 through 0.11.6 Information Disclosure via LFS Locks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91773" }, { "rank": 94, "cve_id": "CVE-2026-91774", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00199, "epss_percentile": 0.09944, "kev": false, "kev_due_at": null, "vendor": "YaoApp", "product": "yao", "cwe": "CWE-862", "title": "Yao through v1.0.0-rc22 Missing Authorization via OpenAPI team endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91774" }, { "rank": 95, "cve_id": "CVE-2026-90845", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00199, "epss_percentile": 0.09845, "kev": false, "kev_due_at": null, "vendor": "PHPGurukul", "product": "Daily Expense Tracker System", "cwe": "CWE-79", "title": "PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90845" }, { "rank": 96, "cve_id": "CVE-2026-18063", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00198, "epss_percentile": 0.09723, "kev": false, "kev_due_at": null, "vendor": "blueglassch", "product": "Job Postings", "cwe": "CWE-79", "title": "Job Postings <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position_button' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18063" }, { "rank": 97, "cve_id": "CVE-2026-57112", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00188, "epss_percentile": 0.08569, "kev": false, "kev_due_at": null, "vendor": "MervinPraison", "product": "PraisonAI", "cwe": "CWE-306", "title": "PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57112" }, { "rank": 98, "cve_id": "CVE-2026-90711", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00187, "epss_percentile": 0.08526, "kev": false, "kev_due_at": null, "vendor": "proxy-addr", "product": "proxy-addr", "cwe": "CWE-290", "title": "proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90711" }, { "rank": 99, "cve_id": "CVE-2026-91772", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00183, "epss_percentile": 0.08128, "kev": false, "kev_due_at": null, "vendor": "halo-dev", "product": "halo", "cwe": "CWE-601", "title": "Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91772" }, { "rank": 100, "cve_id": "CVE-2026-19515", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00169, "epss_percentile": 0.0653, "kev": false, "kev_due_at": null, "vendor": "WSO2", "product": "WSO2 Integrator: MI for Visual Studio Code", "cwe": "CWE-78", "title": "OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19515" }, { "rank": 101, "cve_id": "CVE-2026-85575", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00165, "epss_percentile": 0.06062, "kev": false, "kev_due_at": null, "vendor": "roxnor", "product": "ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets", "cwe": "CWE-79", "title": "The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85575" }, { "rank": 102, "cve_id": "CVE-2026-16593", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00162, "epss_percentile": 0.058, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP Directory Kit", "cwe": "CWE-89", "title": "WP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget Settings", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16593" }, { "rank": 103, "cve_id": "CVE-2026-91819", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00158, "epss_percentile": 0.05348, "kev": false, "kev_due_at": null, "vendor": "MISP", "product": "MISP", "cwe": "CWE-20", "title": "MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponent", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91819" }, { "rank": 104, "cve_id": "CVE-2026-18232", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00145, "epss_percentile": 0.04161, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP Directory Kit", "cwe": "CWE-200", "title": "WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18232" }, { "rank": 105, "cve_id": "CVE-2026-16592", "cvss_base": 2.7, "cvss_severity": "LOW", "epss_score": 0.00139, "epss_percentile": 0.0364, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP Directory Kit", "cwe": "CWE-200", "title": "WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16592" }, { "rank": 106, "cve_id": "CVE-2026-85657", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00138, "epss_percentile": 0.03543, "kev": false, "kev_due_at": null, "vendor": "publishpress", "product": "Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors", "cwe": "CWE-79", "title": "Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'profile_fields_user_email_value_prefix' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85657" }, { "rank": 107, "cve_id": "CVE-2026-81320", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00135, "epss_percentile": 0.03344, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat build of Apache Camel - HawtIO 4", "cwe": "CWE-532", "title": "Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81320" }, { "rank": 108, "cve_id": "CVE-2026-75092", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00128, "epss_percentile": 0.02764, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "cwe": "CWE-250", "title": "Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75092" }, { "rank": 109, "cve_id": "CVE-2026-91090", "cvss_base": 0.9, "cvss_severity": "LOW", "epss_score": 0.00123, "epss_percentile": 0.02352, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "GPAC", "cwe": "CWE-119", "title": "GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91090" }, { "rank": 110, "cve_id": "CVE-2026-91782", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00121, "epss_percentile": 0.02177, "kev": false, "kev_due_at": null, "vendor": "GNU", "product": "Binutils", "cwe": "CWE-404", "title": "GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91782" }, { "rank": 111, "cve_id": "CVE-2026-91781", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.0012, "epss_percentile": 0.02124, "kev": false, "kev_due_at": null, "vendor": "GNU", "product": "Binutils", "cwe": "CWE-404", "title": "GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91781" }, { "rank": 112, "cve_id": "CVE-2026-91088", "cvss_base": 2.4, "cvss_severity": "LOW", "epss_score": 0.00116, "epss_percentile": 0.01831, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "GPAC", "cwe": "CWE-119", "title": "GPAC URL url.c gf_url_concatenate_ex heap-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91088" }, { "rank": 113, "cve_id": "CVE-2026-91779", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00112, "epss_percentile": 0.01552, "kev": false, "kev_due_at": null, "vendor": "GNU", "product": "Binutils", "cwe": "CWE-404", "title": "GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91779" }, { "rank": 114, "cve_id": "CVE-2026-91780", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00112, "epss_percentile": 0.01551, "kev": false, "kev_due_at": null, "vendor": "GNU", "product": "Binutils", "cwe": "CWE-404", "title": "GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91780" }, { "rank": 115, "cve_id": "CVE-2026-91826", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": 0.0011, "epss_percentile": 0.01451, "kev": false, "kev_due_at": null, "vendor": "Samsung Opensource", "product": "rLottie", "cwe": "CWE-121", "title": "Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91826" }, { "rank": 116, "cve_id": "CVE-2026-76159", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00098, "epss_percentile": 0.00855, "kev": false, "kev_due_at": null, "vendor": "Duplicati", "product": "Duplicati", "cwe": "CWE-732", "title": "Duplicati for Windows - Incorrect Permission Assignment for Critical Resource", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76159" }, { "rank": 117, "cve_id": "CVE-2026-86701", "cvss_base": 1.8, "cvss_severity": "LOW", "epss_score": 0.00097, "epss_percentile": 0.00809, "kev": false, "kev_due_at": null, "vendor": "NTT DOCOMO BUSINESS, Inc.", "product": "ManabiPocket for Parents", "cwe": "CWE-926", "title": "Android application \"ManabiPocket for Parents\" contains an improper access control vulnerability in one of its components. A malicious application installed on the user's Android device may exploit the affected component via an Intent, potentially allowing the malicious application to obtain sensitive information from the affected application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86701" }, { "rank": 118, "cve_id": "CVE-2026-53710", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "mcp-context-forge", "cwe": "CWE-94", "title": "MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53710" }, { "rank": 119, "cve_id": "CVE-2026-59971", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "designcomputer", "product": "mysql_mcp_server", "cwe": "CWE-306", "title": "MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59971" }, { "rank": 120, "cve_id": "CVE-2026-71133", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71133" }, { "rank": 121, "cve_id": "CVE-2026-83020", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Platform Security for Java", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java. While the vulnerability is in Oracle Platform Security for Java, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83020" }, { "rank": 122, "cve_id": "CVE-2026-83021", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83021" }, { "rank": 123, "cve_id": "CVE-2026-83059", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83059" }, { "rank": 124, "cve_id": "CVE-2026-83099", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. While the vulnerability is in Oracle Forms, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83099" }, { "rank": 125, "cve_id": "CVE-2026-87230", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87230" }, { "rank": 126, "cve_id": "CVE-2026-45579", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "DIRACGrid", "product": "DIRAC", "cwe": "CWE-95", "title": "DIRAC: RCE in RequestManager due to eval on untrusted input", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45579" }, { "rank": 127, "cve_id": "CVE-2026-61667", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "DIRACGrid", "product": "DIRAC", "cwe": "CWE-89", "title": "DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61667" }, { "rank": 128, "cve_id": "CVE-2026-71163", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Access Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Access Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Access Manager. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71163" }, { "rank": 129, "cve_id": "CVE-2026-73945", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73945" }, { "rank": 130, "cve_id": "CVE-2026-73948", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73948" }, { "rank": 131, "cve_id": "CVE-2026-76669", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76669" }, { "rank": 132, "cve_id": "CVE-2026-76670", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76670" }, { "rank": 133, "cve_id": "CVE-2026-76672", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76672" }, { "rank": 134, "cve_id": "CVE-2026-82997", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Service Delivery Platform", "cwe": null, "title": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82997" }, { "rank": 135, "cve_id": "CVE-2026-82998", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Service Delivery Platform", "cwe": null, "title": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82998" }, { "rank": 136, "cve_id": "CVE-2026-82999", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Service Delivery Platform", "cwe": null, "title": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82999" }, { "rank": 137, "cve_id": "CVE-2026-83031", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Sites", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83031" }, { "rank": 138, "cve_id": "CVE-2026-83038", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "cwe": null, "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83038" }, { "rank": 139, "cve_id": "CVE-2026-83039", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83039" }, { "rank": 140, "cve_id": "CVE-2026-83055", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": null, "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory. While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83055" }, { "rank": 141, "cve_id": "CVE-2026-83056", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": null, "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory. While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83056" }, { "rank": 142, "cve_id": "CVE-2026-83057", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": null, "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory. While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83057" }, { "rank": 143, "cve_id": "CVE-2026-83058", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": null, "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Internet Directory. While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83058" }, { "rank": 144, "cve_id": "CVE-2026-83282", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83282" }, { "rank": 145, "cve_id": "CVE-2026-87172", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87172" }, { "rank": 146, "cve_id": "CVE-2026-12351", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "MQ", "cwe": "CWE-74", "title": "IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12351" }, { "rank": 147, "cve_id": "CVE-2026-19773", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libwebsockets", "product": "libwebsockets", "cwe": "CWE-787", "title": "libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19773" }, { "rank": 148, "cve_id": "CVE-2026-54337", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ShaneIsrael", "product": "fireshare", "cwe": "CWE-88", "title": "Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54337" }, { "rank": 149, "cve_id": "CVE-2026-55211", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "equinor", "product": "surfio", "cwe": "CWE-125", "title": "surfio IRAP header size fields cause out-of-bounds reads", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55211" }, { "rank": 150, "cve_id": "CVE-2026-61560", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "zereight", "product": "gitlab-mcp", "cwe": "CWE-22", "title": "@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61560" }, { "rank": 151, "cve_id": "CVE-2026-63695", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "SmartFabric OS10 Software", "cwe": "CWE-284", "title": "Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Session theft.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63695" }, { "rank": 152, "cve_id": "CVE-2026-70748", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70748" }, { "rank": 153, "cve_id": "CVE-2026-70756", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70756" }, { "rank": 154, "cve_id": "CVE-2026-70757", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebLogic Server", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70757" }, { "rank": 155, "cve_id": "CVE-2026-70913", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70913" }, { "rank": 156, "cve_id": "CVE-2026-73940", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73940" }, { "rank": 157, "cve_id": "CVE-2026-73947", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73947" }, { "rank": 158, "cve_id": "CVE-2026-73950", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73950" }, { "rank": 159, "cve_id": "CVE-2026-73953", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73953" }, { "rank": 160, "cve_id": "CVE-2026-73956", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73956" }, { "rank": 161, "cve_id": "CVE-2026-73961", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle JDeveloper", "cwe": "CWE-287", "title": "Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73961" }, { "rank": 162, "cve_id": "CVE-2026-73963", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73963" }, { "rank": 163, "cve_id": "CVE-2026-76673", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76673" }, { "rank": 164, "cve_id": "CVE-2026-76674", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76674" }, { "rank": 165, "cve_id": "CVE-2026-82994", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Platform Security for Java", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82994" }, { "rank": 166, "cve_id": "CVE-2026-82995", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Platform Security for Java", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82995" }, { "rank": 167, "cve_id": "CVE-2026-83000", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Service Delivery Platform", "cwe": "CWE-287", "title": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83000" }, { "rank": 168, "cve_id": "CVE-2026-83035", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Sites", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83035" }, { "rank": 169, "cve_id": "CVE-2026-83036", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Sites", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83036" }, { "rank": 170, "cve_id": "CVE-2026-83037", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Sites", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83037" }, { "rank": 171, "cve_id": "CVE-2026-83042", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83042" }, { "rank": 172, "cve_id": "CVE-2026-83054", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83054" }, { "rank": 173, "cve_id": "CVE-2026-83060", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83060" }, { "rank": 174, "cve_id": "CVE-2026-83061", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83061" }, { "rank": 175, "cve_id": "CVE-2026-83062", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83062" }, { "rank": 176, "cve_id": "CVE-2026-83066", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83066" }, { "rank": 177, "cve_id": "CVE-2026-83094", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83094" }, { "rank": 178, "cve_id": "CVE-2026-83095", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83095" }, { "rank": 179, "cve_id": "CVE-2026-83098", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83098" }, { "rank": 180, "cve_id": "CVE-2026-83100", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83100" }, { "rank": 181, "cve_id": "CVE-2026-83108", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83108" }, { "rank": 182, "cve_id": "CVE-2026-83151", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Service Delivery Platform", "cwe": "CWE-287", "title": "Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83151" }, { "rank": 183, "cve_id": "CVE-2026-83232", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Data Integrator", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83232" }, { "rank": 184, "cve_id": "CVE-2026-83261", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Lifecycle Analytics", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Core). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Product Lifecycle Analytics. Successful attacks of this vulnerability can result in takeover of Oracle Product Lifecycle Analytics. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83261" }, { "rank": 185, "cve_id": "CVE-2026-83269", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": "CWE-287", "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83269" }, { "rank": 186, "cve_id": "CVE-2026-83283", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83283" }, { "rank": 187, "cve_id": "CVE-2026-83327", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Framework", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in takeover of Oracle Applications Framework. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83327" }, { "rank": 188, "cve_id": "CVE-2026-83339", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83339" }, { "rank": 189, "cve_id": "CVE-2026-83355", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Enterprise Manager for Fusion Middleware", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: Metrics). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager for Fusion Middleware. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83355" }, { "rank": 190, "cve_id": "CVE-2026-83452", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Document Management and Collaboration", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83452" }, { "rank": 191, "cve_id": "CVE-2026-83462", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Mobile Application Server", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Application Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83462" }, { "rank": 192, "cve_id": "CVE-2026-87184", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87184" }, { "rank": 193, "cve_id": "CVE-2026-87188", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87188" }, { "rank": 194, "cve_id": "CVE-2026-61559", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "zereight", "product": "gitlab-mcp", "cwe": "CWE-918", "title": "@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61559" }, { "rank": 195, "cve_id": "CVE-2026-61568", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "zereight", "product": "gitlab-mcp", "cwe": "CWE-350", "title": "@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61568" }, { "rank": 196, "cve_id": "CVE-2026-73962", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Access Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 9.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73962" }, { "rank": 197, "cve_id": "CVE-2026-83029", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Managed File Transfer", "cwe": null, "title": "Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Managed File Transfer. While the vulnerability is in Oracle Managed File Transfer, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Managed File Transfer accessible data as well as unauthorized access to critical data or complete access to all Oracle Managed File Transfer accessible data. CVSS 3.1 Base Score 9.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83029" }, { "rank": 198, "cve_id": "CVE-2026-83040", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83040" }, { "rank": 199, "cve_id": "CVE-2026-83043", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83043" }, { "rank": 200, "cve_id": "CVE-2026-87186", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87186" }, { "rank": 201, "cve_id": "CVE-2026-91710", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91710" }, { "rank": 202, "cve_id": "CVE-2026-91718", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91718" }, { "rank": 203, "cve_id": "CVE-2026-91728", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-190", "title": "Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91728" }, { "rank": 204, "cve_id": "CVE-2026-91749", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91749" }, { "rank": 205, "cve_id": "CVE-2026-15640", "cvss_base": 9.5, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Delinea", "product": "Secret Server (On-Prem)", "cwe": "CWE-290", "title": "Authentication Bypass via SAML Response Manipulation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15640" }, { "rank": 206, "cve_id": "CVE-2026-78225", "cvss_base": 9.5, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wärtsilä", "product": "FOS-Onboard", "cwe": "CWE-321", "title": "Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78225" }, { "rank": 207, "cve_id": "CVE-2026-66887", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Digital Watchdog", "product": "VMAX A1 G4 DVR", "cwe": "CWE-862", "title": "Missing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66887" }, { "rank": 208, "cve_id": "CVE-2026-66890", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Digital Watchdog", "product": "VMAX A1 G4 DVR", "cwe": "CWE-798", "title": "Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66890" }, { "rank": 209, "cve_id": "CVE-2026-68491", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webpros", "product": "SolusVM", "cwe": "CWE-59", "title": "An insufficient check allowed for the overwrite of arbitrary files via a symlink.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68491" }, { "rank": 210, "cve_id": "CVE-2026-77179", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Docker", "product": "Docker Sandboxes", "cwe": "CWE-59", "title": "Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77179" }, { "rank": 211, "cve_id": "CVE-2026-91998", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "casdoor", "product": "casdoor", "cwe": "CWE-863", "title": "Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcp", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91998" }, { "rank": 212, "cve_id": "CVE-2023-54398", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Yonyou", "product": "U8 Cloud", "cwe": "CWE-502", "title": "Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet", "url": "https://www.cve.org/CVERecord?id=CVE-2023-54398" }, { "rank": 213, "cve_id": "CVE-2024-58385", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Yonyou", "product": "U8 CRM", "cwe": "CWE-89", "title": "Yonyou U8 CRM SQL Injection via fillbacksettingedit.php", "url": "https://www.cve.org/CVERecord?id=CVE-2024-58385" }, { "rank": 214, "cve_id": "CVE-2026-15639", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Delinea", "product": "Secret Server (On-Prem)", "cwe": "CWE-79", "title": "Reflected Cross-Site Scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15639" }, { "rank": 215, "cve_id": "CVE-2026-39919", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Artifex Software", "product": "Ghostscript", "cwe": "CWE-122", "title": "Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39919" }, { "rank": 216, "cve_id": "CVE-2026-53459", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "maziggy", "product": "bambuddy", "cwe": "CWE-636", "title": "Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53459" }, { "rank": 217, "cve_id": "CVE-2026-73807", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mySCADA Technologies", "product": "mySCADA myPRO", "cwe": "CWE-862", "title": "mySCADA myPRO Manager Missing Authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73807" }, { "rank": 218, "cve_id": "CVE-2026-73957", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Portal accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 9.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73957" }, { "rank": 219, "cve_id": "CVE-2026-81855", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wärtsilä", "product": "FOS-Onboard", "cwe": "CWE-321", "title": "Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81855" }, { "rank": 220, "cve_id": "CVE-2026-83027", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager Connector accessible data as well as unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 9.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83027" }, { "rank": 221, "cve_id": "CVE-2026-89026", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Issabel Foundation", "product": "Issabel Framework", "cwe": "CWE-321", "title": "Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89026" }, { "rank": 222, "cve_id": "CVE-2026-89040", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Tencent", "product": "Mass Service Engine in Cluster (MSEC)", "cwe": "CWE-22", "title": "Tencent Mass Service Engine in Cluster (MSEC) path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89040" }, { "rank": 223, "cve_id": "CVE-2026-89308", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "TREXOM", "product": "TrxTimeATTENDANCE", "cwe": "CWE-78", "title": "Arbitrary command execution in TrxTimeATTENDANCE", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89308" }, { "rank": 224, "cve_id": "CVE-2026-91939", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Cotonti", "product": "Cotonti", "cwe": "CWE-502", "title": "Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91939" }, { "rank": 225, "cve_id": "CVE-2026-91995", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pig-mesh", "product": "pig", "cwe": "CWE-620", "title": "pig before 4.1.0 Unverified Password Change via /register/password", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91995" }, { "rank": 226, "cve_id": "CVE-2026-46495", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenIdentityPlatform", "product": "OpenDJ", "cwe": "CWE-502", "title": "OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46495" }, { "rank": 227, "cve_id": "CVE-2026-69204", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-444", "title": "Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69204" }, { "rank": 228, "cve_id": "CVE-2026-73458", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-303", "title": "On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73458" }, { "rank": 229, "cve_id": "CVE-2026-91949", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-693", "title": "FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91949" }, { "rank": 230, "cve_id": "CVE-2026-91988", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dep0we", "product": "atomic-agents-stack", "cwe": "CWE-319", "title": "atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91988" }, { "rank": 231, "cve_id": "CVE-2026-15638", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Delinea", "product": "Secret Server (On-Prem)", "cwe": "CWE-327", "title": "Cryptographic Padding Oracle", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15638" }, { "rank": 232, "cve_id": "CVE-2026-46488", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "motioneye-project", "product": "motioneye", "cwe": "CWE-256", "title": "motionEye: Authentication possible via password hash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46488" }, { "rank": 233, "cve_id": "CVE-2026-55158", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "wktk", "product": "conflibot", "cwe": "CWE-78", "title": "Conflibot: Command injection via crafted pull request branch names under pull_request_target", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55158" }, { "rank": 234, "cve_id": "CVE-2026-63696", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "SmartFabric OS10 Software", "cwe": "CWE-494", "title": "Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63696" }, { "rank": 235, "cve_id": "CVE-2026-73944", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Access Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73944" }, { "rank": 236, "cve_id": "CVE-2026-73946", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73946" }, { "rank": 237, "cve_id": "CVE-2026-73952", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": "CWE-287", "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Portal accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73952" }, { "rank": 238, "cve_id": "CVE-2026-76675", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76675" }, { "rank": 239, "cve_id": "CVE-2026-83001", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83001" }, { "rank": 240, "cve_id": "CVE-2026-83006", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83006" }, { "rank": 241, "cve_id": "CVE-2026-83064", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83064" }, { "rank": 242, "cve_id": "CVE-2026-83103", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Forms. While the vulnerability is in Oracle Forms, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83103" }, { "rank": 243, "cve_id": "CVE-2026-83104", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Forms. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Forms accessible data as well as unauthorized access to critical data or complete access to all Oracle Forms accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83104" }, { "rank": 244, "cve_id": "CVE-2026-83107", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Forms. While the vulnerability is in Oracle Forms, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83107" }, { "rank": 245, "cve_id": "CVE-2026-83149", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Application Testing Suite", "cwe": null, "title": "Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. While the vulnerability is in Oracle Application Testing Suite, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Testing Suite accessible data as well as unauthorized update, insert or delete access to some of Oracle Application Testing Suite accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Application Testing Suite. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83149" }, { "rank": 246, "cve_id": "CVE-2026-83154", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM End User", "cwe": "CWE-287", "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM End User accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM End User accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83154" }, { "rank": 247, "cve_id": "CVE-2026-83196", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. While the vulnerability is in Siebel CRM Deployment, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83196" }, { "rank": 248, "cve_id": "CVE-2026-83197", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel Apps - Financial Services", "cwe": null, "title": "Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Financial Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Apps - Financial Services accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel Apps - Financial Services. CVSS 3.1 Base Score 9.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83197" }, { "rank": 249, "cve_id": "CVE-2026-83201", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": "CWE-287", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83201" }, { "rank": 250, "cve_id": "CVE-2026-83202", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": "CWE-287", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83202" }, { "rank": 251, "cve_id": "CVE-2026-83229", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. While the vulnerability is in Siebel CRM Deployment, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83229" }, { "rank": 252, "cve_id": "CVE-2026-83260", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83260" }, { "rank": 253, "cve_id": "CVE-2026-83268", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83268" }, { "rank": 254, "cve_id": "CVE-2026-87128", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87128" }, { "rank": 255, "cve_id": "CVE-2026-87129", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87129" }, { "rank": 256, "cve_id": "CVE-2026-87170", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87170" }, { "rank": 257, "cve_id": "CVE-2026-87173", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87173" }, { "rank": 258, "cve_id": "CVE-2026-87175", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87175" }, { "rank": 259, "cve_id": "CVE-2026-87176", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87176" }, { "rank": 260, "cve_id": "CVE-2026-87189", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87189" }, { "rank": 261, "cve_id": "CVE-2026-87214", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87214" }, { "rank": 262, "cve_id": "CVE-2026-87217", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-287", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87217" }, { "rank": 263, "cve_id": "CVE-2026-87223", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87223" }, { "rank": 264, "cve_id": "CVE-2026-89022", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "bookstackapp", "product": "bookstack", "cwe": "CWE-290", "title": "BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89022" }, { "rank": 265, "cve_id": "CVE-2023-54397", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "tornadoweb", "product": "tornado", "cwe": "CWE-444", "title": "Tornado before 6.3.3 HTTP Request Smuggling via Content-Length", "url": "https://www.cve.org/CVERecord?id=CVE-2023-54397" }, { "rank": 266, "cve_id": "CVE-2024-14029", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "tornadoweb", "product": "tornado", "cwe": "CWE-444", "title": "Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding", "url": "https://www.cve.org/CVERecord?id=CVE-2024-14029" }, { "rank": 267, "cve_id": "CVE-2026-61549", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "woodpecker-ci", "product": "woodpecker", "cwe": "CWE-269", "title": "Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61549" }, { "rank": 268, "cve_id": "CVE-2026-77866", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Slab", "product": "safeurl", "cwe": "CWE-636", "title": "SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77866" }, { "rank": 269, "cve_id": "CVE-2026-77972", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Slab", "product": "safeurl", "cwe": "CWE-367", "title": "safeurl validated address is not bound to the request, allowing DNS rebinding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77972" }, { "rank": 270, "cve_id": "CVE-2026-83105", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. While the vulnerability is in Oracle Forms, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83105" }, { "rank": 271, "cve_id": "CVE-2026-91931", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-78", "title": "Flowise before 3.1.4 Remote Code Execution via Custom MCP npx", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91931" }, { "rank": 272, "cve_id": "CVE-2026-91932", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-20", "title": "Flowise before 3.1.4 Remote Code Execution via cwd Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91932" }, { "rank": 273, "cve_id": "CVE-2026-83304", "cvss_base": 8.9, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83304" }, { "rank": 274, "cve_id": "CVE-2026-0159", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0159" }, { "rank": 275, "cve_id": "CVE-2026-0170", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0170" }, { "rank": 276, "cve_id": "CVE-2026-0171", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0171" }, { "rank": 277, "cve_id": "CVE-2026-0200", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-122", "title": "In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0200" }, { "rank": 278, "cve_id": "CVE-2026-12728", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "MQ", "cwe": null, "title": "IBM MQ Java messaging is vulnerable to remote code execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12728" }, { "rank": 279, "cve_id": "CVE-2026-14805", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "StylemixThemes", "product": "Consulting - Business, Finance WordPress Theme", "cwe": "CWE-269", "title": "Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAX", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14805" }, { "rank": 280, "cve_id": "CVE-2026-16140", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenBMC", "product": "phosphor-net-ipmid", "cwe": "CWE-863", "title": "OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16140" }, { "rank": 281, "cve_id": "CVE-2026-19780", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Koha", "product": "Koha", "cwe": "CWE-95", "title": "Koha Eval Code Injection Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19780" }, { "rank": 282, "cve_id": "CVE-2026-40058", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "CrowdStrike", "product": "Falcon sensor for Windows", "cwe": "CWE-367", "title": "Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows", "url": "https://www.cve.org/CVERecord?id=CVE-2026-40058" }, { "rank": 283, "cve_id": "CVE-2026-44300", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opencost", "product": "opencost", "cwe": "CWE-20", "title": "OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44300" }, { "rank": 284, "cve_id": "CVE-2026-52484", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-78", "title": "An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52484" }, { "rank": 285, "cve_id": "CVE-2026-55318", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55318" }, { "rank": 286, "cve_id": "CVE-2026-55331", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-120", "title": "In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55331" }, { "rank": 287, "cve_id": "CVE-2026-56882", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-200", "title": "In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56882" }, { "rank": 288, "cve_id": "CVE-2026-56920", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56920" }, { "rank": 289, "cve_id": "CVE-2026-56942", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56942" }, { "rank": 290, "cve_id": "CVE-2026-56974", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56974" }, { "rank": 291, "cve_id": "CVE-2026-56997", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56997" }, { "rank": 292, "cve_id": "CVE-2026-58683", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58683" }, { "rank": 293, "cve_id": "CVE-2026-58710", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-120", "title": "In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58710" }, { "rank": 294, "cve_id": "CVE-2026-59160", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "DerYeger", "product": "yeger", "cwe": "CWE-306", "title": "Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/run", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59160" }, { "rank": 295, "cve_id": "CVE-2026-69486", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Edge (Chromium-based)", "cwe": "CWE-122", "title": "Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69486" }, { "rank": 296, "cve_id": "CVE-2026-70915", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70915" }, { "rank": 297, "cve_id": "CVE-2026-71047", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71047" }, { "rank": 298, "cve_id": "CVE-2026-73942", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73942" }, { "rank": 299, "cve_id": "CVE-2026-73949", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73949" }, { "rank": 300, "cve_id": "CVE-2026-73959", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73959" }, { "rank": 301, "cve_id": "CVE-2026-76676", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76676" }, { "rank": 302, "cve_id": "CVE-2026-76677", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76677" }, { "rank": 303, "cve_id": "CVE-2026-76678", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76678" }, { "rank": 304, "cve_id": "CVE-2026-83005", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83005" }, { "rank": 305, "cve_id": "CVE-2026-83008", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83008" }, { "rank": 306, "cve_id": "CVE-2026-83009", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83009" }, { "rank": 307, "cve_id": "CVE-2026-83013", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83013" }, { "rank": 308, "cve_id": "CVE-2026-83017", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83017" }, { "rank": 309, "cve_id": "CVE-2026-83032", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Sites", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83032" }, { "rank": 310, "cve_id": "CVE-2026-83033", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Sites", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83033" }, { "rank": 311, "cve_id": "CVE-2026-83053", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83053" }, { "rank": 312, "cve_id": "CVE-2026-83069", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Fusion Middleware Control", "cwe": null, "title": "Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Fusion Middleware Control. Successful attacks of this vulnerability can result in takeover of Oracle Fusion Middleware Control. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83069" }, { "rank": 313, "cve_id": "CVE-2026-83086", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "cwe": null, "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83086" }, { "rank": 314, "cve_id": "CVE-2026-83090", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Spares Management", "cwe": null, "title": "Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares Management. Successful attacks of this vulnerability can result in takeover of Oracle Spares Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83090" }, { "rank": 315, "cve_id": "CVE-2026-83119", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle User Management", "cwe": null, "title": "Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in takeover of Oracle User Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83119" }, { "rank": 316, "cve_id": "CVE-2026-83120", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Alert", "cwe": null, "title": "Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Alert. Successful attacks of this vulnerability can result in takeover of Oracle Alert. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83120" }, { "rank": 317, "cve_id": "CVE-2026-83121", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Marketing", "cwe": null, "title": "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83121" }, { "rank": 318, "cve_id": "CVE-2026-83122", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Report Manager", "cwe": null, "title": "Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager. Successful attacks of this vulnerability can result in takeover of Oracle Report Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83122" }, { "rank": 319, "cve_id": "CVE-2026-83124", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Sales Online", "cwe": null, "title": "Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online. Successful attacks of this vulnerability can result in takeover of Oracle Sales Online. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83124" }, { "rank": 320, "cve_id": "CVE-2026-83125", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Report Manager", "cwe": null, "title": "Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager. Successful attacks of this vulnerability can result in takeover of Oracle Report Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83125" }, { "rank": 321, "cve_id": "CVE-2026-83136", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Spares Management", "cwe": null, "title": "Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares Management. Successful attacks of this vulnerability can result in takeover of Oracle Spares Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83136" }, { "rank": 322, "cve_id": "CVE-2026-83137", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Spares Management", "cwe": null, "title": "Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares Management. Successful attacks of this vulnerability can result in takeover of Oracle Spares Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83137" }, { "rank": 323, "cve_id": "CVE-2026-83148", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Application Testing Suite", "cwe": null, "title": "Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83148" }, { "rank": 324, "cve_id": "CVE-2026-83153", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83153" }, { "rank": 325, "cve_id": "CVE-2026-83160", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": null, "title": "Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in takeover of RDBMS. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83160" }, { "rank": 326, "cve_id": "CVE-2026-83163", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Application Object Library", "cwe": null, "title": "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83163" }, { "rank": 327, "cve_id": "CVE-2026-83164", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Customer Interaction History", "cwe": null, "title": "Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks of this vulnerability can result in takeover of Oracle Customer Interaction History. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83164" }, { "rank": 328, "cve_id": "CVE-2026-83165", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Customer Interaction History", "cwe": null, "title": "Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Customer Interaction History. Successful attacks of this vulnerability can result in takeover of Oracle Customer Interaction History. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83165" }, { "rank": 329, "cve_id": "CVE-2026-83168", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Manager", "cwe": null, "title": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in takeover of Oracle Applications Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83168" }, { "rank": 330, "cve_id": "CVE-2026-83180", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83180" }, { "rank": 331, "cve_id": "CVE-2026-83189", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle User Management", "cwe": null, "title": "Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in takeover of Oracle User Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83189" }, { "rank": 332, "cve_id": "CVE-2026-83194", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Depot Repair", "cwe": null, "title": "Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in takeover of Oracle Depot Repair. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83194" }, { "rank": 333, "cve_id": "CVE-2026-83199", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83199" }, { "rank": 334, "cve_id": "CVE-2026-83205", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Framework", "cwe": null, "title": "Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in takeover of Oracle Applications Framework. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83205" }, { "rank": 335, "cve_id": "CVE-2026-83208", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83208" }, { "rank": 336, "cve_id": "CVE-2026-83209", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Development", "cwe": null, "title": "Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83209" }, { "rank": 337, "cve_id": "CVE-2026-83210", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83210" }, { "rank": 338, "cve_id": "CVE-2026-83212", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel Apps - Self Service", "cwe": null, "title": "Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Self Service. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Self Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83212" }, { "rank": 339, "cve_id": "CVE-2026-83271", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": null, "title": "Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Execute on DBMS_REDEFINITION privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in takeover of RDBMS. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83271" }, { "rank": 340, "cve_id": "CVE-2026-83301", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Service Administration UI). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83301" }, { "rank": 341, "cve_id": "CVE-2026-83306", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle JDeveloper", "cwe": null, "title": "Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83306" }, { "rank": 342, "cve_id": "CVE-2026-83315", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83315" }, { "rank": 343, "cve_id": "CVE-2026-83329", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Framework", "cwe": null, "title": "Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in takeover of Oracle Applications Framework. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83329" }, { "rank": 344, "cve_id": "CVE-2026-83331", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Framework", "cwe": null, "title": "Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in takeover of Oracle Applications Framework. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83331" }, { "rank": 345, "cve_id": "CVE-2026-83335", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83335" }, { "rank": 346, "cve_id": "CVE-2026-83338", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Manager", "cwe": null, "title": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in takeover of Oracle Applications Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83338" }, { "rank": 347, "cve_id": "CVE-2026-83340", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83340" }, { "rank": 348, "cve_id": "CVE-2026-83348", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": null, "title": "Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create DB Link privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in takeover of RDBMS. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83348" }, { "rank": 349, "cve_id": "CVE-2026-83410", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Coherence", "cwe": null, "title": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83410" }, { "rank": 350, "cve_id": "CVE-2026-83411", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Coherence", "cwe": null, "title": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83411" }, { "rank": 351, "cve_id": "CVE-2026-83423", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle JDeveloper", "cwe": null, "title": "Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83423" }, { "rank": 352, "cve_id": "CVE-2026-83444", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83444" }, { "rank": 353, "cve_id": "CVE-2026-83445", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Complex Maintenance, Repair and Overhaul", "cwe": null, "title": "Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Complex Maintenance, Repair and Overhaul. Successful attacks of this vulnerability can result in takeover of Oracle Complex Maintenance, Repair and Overhaul. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83445" }, { "rank": 354, "cve_id": "CVE-2026-83454", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Document Management and Collaboration", "cwe": null, "title": "Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83454" }, { "rank": 355, "cve_id": "CVE-2026-83456", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Demand Signal Repository", "cwe": null, "title": "Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerability can result in takeover of Oracle Demand Signal Repository. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83456" }, { "rank": 356, "cve_id": "CVE-2026-83479", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Contracts", "cwe": null, "title": "Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts. Successful attacks of this vulnerability can result in takeover of Oracle Contracts. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83479" }, { "rank": 357, "cve_id": "CVE-2026-85893", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Edge (Chromium-based)", "cwe": "CWE-416", "title": "Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85893" }, { "rank": 358, "cve_id": "CVE-2026-87150", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Bills of Material", "cwe": null, "title": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. Successful attacks of this vulnerability can result in takeover of Oracle Bills of Material. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87150" }, { "rank": 359, "cve_id": "CVE-2026-87155", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87155" }, { "rank": 360, "cve_id": "CVE-2026-87162", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Contract Lifecycle Management for Public Sector", "cwe": null, "title": "Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contract Lifecycle Management for Public Sector. Successful attacks of this vulnerability can result in takeover of Oracle Contract Lifecycle Management for Public Sector. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87162" }, { "rank": 361, "cve_id": "CVE-2026-87163", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Purchasing", "cwe": null, "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in takeover of Oracle Purchasing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87163" }, { "rank": 362, "cve_id": "CVE-2026-87165", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Contract Lifecycle Management for Public Sector", "cwe": null, "title": "Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: ECC For Award and IDV). The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contract Lifecycle Management for Public Sector. Successful attacks of this vulnerability can result in takeover of Oracle Contract Lifecycle Management for Public Sector. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87165" }, { "rank": 363, "cve_id": "CVE-2026-87179", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87179" }, { "rank": 364, "cve_id": "CVE-2026-87180", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87180" }, { "rank": 365, "cve_id": "CVE-2026-87181", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87181" }, { "rank": 366, "cve_id": "CVE-2026-87182", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87182" }, { "rank": 367, "cve_id": "CVE-2026-87185", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87185" }, { "rank": 368, "cve_id": "CVE-2026-87187", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87187" }, { "rank": 369, "cve_id": "CVE-2026-87201", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87201" }, { "rank": 370, "cve_id": "CVE-2026-87202", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87202" }, { "rank": 371, "cve_id": "CVE-2026-87204", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87204" }, { "rank": 372, "cve_id": "CVE-2026-87224", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87224" }, { "rank": 373, "cve_id": "CVE-2026-87226", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87226" }, { "rank": 374, "cve_id": "CVE-2026-87227", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87227" }, { "rank": 375, "cve_id": "CVE-2026-87238", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87238" }, { "rank": 376, "cve_id": "CVE-2026-88616", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-863", "title": "An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process, Warm-Flow TaskService.skip, POST /workflow/task/completeTask components", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88616" }, { "rank": 377, "cve_id": "CVE-2026-91709", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-843", "title": "Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91709" }, { "rank": 378, "cve_id": "CVE-2026-91721", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91721" }, { "rank": 379, "cve_id": "CVE-2026-91731", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-843", "title": "Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91731" }, { "rank": 380, "cve_id": "CVE-2026-91736", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91736" }, { "rank": 381, "cve_id": "CVE-2026-91741", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-843", "title": "Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91741" }, { "rank": 382, "cve_id": "CVE-2026-92006", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92006" }, { "rank": 383, "cve_id": "CVE-2026-92007", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92007" }, { "rank": 384, "cve_id": "CVE-2026-92008", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92008" }, { "rank": 385, "cve_id": "CVE-2026-92009", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92009" }, { "rank": 386, "cve_id": "CVE-2026-92010", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92010" }, { "rank": 387, "cve_id": "CVE-2026-92011", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92011" }, { "rank": 388, "cve_id": "CVE-2026-92012", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92012" }, { "rank": 389, "cve_id": "CVE-2026-92013", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92013" }, { "rank": 390, "cve_id": "CVE-2026-92014", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92014" }, { "rank": 391, "cve_id": "CVE-2026-92015", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in the WebExtensions component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92015" }, { "rank": 392, "cve_id": "CVE-2026-92017", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in the DOM: Service Workers component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92017" }, { "rank": 393, "cve_id": "CVE-2026-92020", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92020" }, { "rank": 394, "cve_id": "CVE-2026-92033", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in Firefox for Android", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92033" }, { "rank": 395, "cve_id": "CVE-2026-92043", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-120", "title": "Privilege escalation due to incorrect boundary conditions in the Audio/Video component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92043" }, { "rank": 396, "cve_id": "CVE-2026-92047", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in the Crash Reporting component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92047" }, { "rank": 397, "cve_id": "CVE-2026-92052", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-457", "title": "Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92052" }, { "rank": 398, "cve_id": "CVE-2026-92053", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92053" }, { "rank": 399, "cve_id": "CVE-2026-92054", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-119", "title": "Privilege escalation in the Memory component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92054" }, { "rank": 400, "cve_id": "CVE-2026-92055", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in the DevTools component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92055" }, { "rank": 401, "cve_id": "CVE-2026-92062", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in the Session Restore component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92062" }, { "rank": 402, "cve_id": "CVE-2026-92073", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in the Enterprise Policies component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92073" }, { "rank": 403, "cve_id": "CVE-2026-18110", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an unauthenticated attacker to retrieve the complete backend user directory — internal ID, username", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18110" }, { "rank": 404, "cve_id": "CVE-2026-54251", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "netty", "product": "netty-incubator-codec-ohttp", "cwe": "CWE-664", "title": "netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54251" }, { "rank": 405, "cve_id": "CVE-2026-55887", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "docker", "product": "mcp-gateway", "cwe": "CWE-88", "title": "MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55887" }, { "rank": 406, "cve_id": "CVE-2026-58201", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "merill", "product": "lokka", "cwe": "CWE-918", "title": "Lokka: Azure Resource Manager URL path validation issue", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58201" }, { "rank": 407, "cve_id": "CVE-2026-68070", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Digital Watchdog", "product": "VMAX A1 G4 DVR", "cwe": "CWE-306", "title": "Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68070" }, { "rank": 408, "cve_id": "CVE-2026-68950", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Digital Watchdog", "product": "VMAX A1 G4 DVR", "cwe": "CWE-798", "title": "Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68950" }, { "rank": 409, "cve_id": "CVE-2026-69205", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-444", "title": "Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69205" }, { "rank": 410, "cve_id": "CVE-2026-69217", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-444", "title": "Http4s: Ember Server accepts duplicate Content-Length headers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69217" }, { "rank": 411, "cve_id": "CVE-2026-73926", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Access Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73926" }, { "rank": 412, "cve_id": "CVE-2026-76852", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR268", "cwe": "CWE-354", "title": "Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76852" }, { "rank": 413, "cve_id": "CVE-2026-76860", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-121", "title": "Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76860" }, { "rank": 414, "cve_id": "CVE-2026-76861", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-121", "title": "Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76861" }, { "rank": 415, "cve_id": "CVE-2026-76862", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-88", "title": "Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76862" }, { "rank": 416, "cve_id": "CVE-2026-79994", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Docker", "product": "Docker Sandboxes", "cwe": "CWE-367", "title": "Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79994" }, { "rank": 417, "cve_id": "CVE-2026-81567", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "j2commerce.com", "product": "J2Store extension for Joomla", "cwe": "CWE-89", "title": "Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81567" }, { "rank": 418, "cve_id": "CVE-2026-81568", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "j2commerce.com", "product": "J2Store extension for Joomla", "cwe": "CWE-22", "title": "Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81568" }, { "rank": 419, "cve_id": "CVE-2026-82189", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "j2commerce.com", "product": "J2Store extension for Joomla", "cwe": "CWE-472", "title": "Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82189" }, { "rank": 420, "cve_id": "CVE-2026-83025", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager Connector accessible data as well as unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83025" }, { "rank": 421, "cve_id": "CVE-2026-83135", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle iStore", "cwe": null, "title": "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iStore accessible data as well as unauthorized access to critical data or complete access to all Oracle iStore accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83135" }, { "rank": 422, "cve_id": "CVE-2026-83144", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel Apps - Customer Order Management", "cwe": null, "title": "Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Customer Order Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Apps - Customer Order Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Customer Order Management accessible data as well as unauthorized access to critical data or complete access to all Siebel Apps - Customer Order Management accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83144" }, { "rank": 423, "cve_id": "CVE-2026-83145", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel Apps - Customer Order Management", "cwe": null, "title": "Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Customer Order Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Apps - Customer Order Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Customer Order Management accessible data as well as unauthorized access to critical data or complete access to all Siebel Apps - Customer Order Management accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83145" }, { "rank": 424, "cve_id": "CVE-2026-83310", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle BI Publisher accessible data as well as unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83310" }, { "rank": 425, "cve_id": "CVE-2026-87171", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87171" }, { "rank": 426, "cve_id": "CVE-2026-87178", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87178" }, { "rank": 427, "cve_id": "CVE-2026-87791", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Developers Italia", "product": "design-scuole-wordpress-theme", "cwe": "CWE-22", "title": "Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87791" }, { "rank": 428, "cve_id": "CVE-2026-87792", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Developers Italia", "product": "design-scuole-wordpress-theme", "cwe": "CWE-200", "title": "Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87792" }, { "rank": 429, "cve_id": "CVE-2026-89025", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Belden", "product": "Hirschmann HiOS Switch Platform", "cwe": "CWE-755", "title": "Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89025" }, { "rank": 430, "cve_id": "CVE-2026-91925", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "polyaxon", "product": "polyaxon", "cwe": "CWE-1336", "title": "Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91925" }, { "rank": 431, "cve_id": "CVE-2026-91934", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-22", "title": "Flowise before 3.1.4 Remote Code Execution via SQL Database Chain", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91934" }, { "rank": 432, "cve_id": "CVE-2026-91935", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-918", "title": "Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91935" }, { "rank": 433, "cve_id": "CVE-2026-91937", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-943", "title": "Flowise before 3.1.4 NoSQL Injection via sessionId", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91937" }, { "rank": 434, "cve_id": "CVE-2026-91940", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "unclecode", "product": "crawl4ai", "cwe": "CWE-22", "title": "crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91940" }, { "rank": 435, "cve_id": "CVE-2026-91941", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "unclecode", "product": "crawl4ai", "cwe": "CWE-400", "title": "Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91941" }, { "rank": 436, "cve_id": "CVE-2026-91964", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-122", "title": "FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91964" }, { "rank": 437, "cve_id": "CVE-2026-91965", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WWBN", "product": "AVideo", "cwe": "CWE-200", "title": "WWBN AVideo through 29.0 Broken Access Control via Live Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91965" }, { "rank": 438, "cve_id": "CVE-2026-91972", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-307", "title": "Vikunja before 2.6.0 Authentication Bypass via Unthrottled API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91972" }, { "rank": 439, "cve_id": "CVE-2026-91973", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-307", "title": "Vikunja before 2.6.0 Authentication Bypass via CalDAV BasicAuth", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91973" }, { "rank": 440, "cve_id": "CVE-2026-91985", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-200", "title": "Vikunja before 2.6.0 Privilege Escalation via Link Share Hash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91985" }, { "rank": 441, "cve_id": "CVE-2026-91989", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dep0we", "product": "atomic-agents-stack", "cwe": "CWE-22", "title": "atomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.py", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91989" }, { "rank": 442, "cve_id": "CVE-2026-91990", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "tornadoweb", "product": "tornado", "cwe": "CWE-770", "title": "Tornado before 6.5.8 Memory Amplification DoS via multipart", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91990" }, { "rank": 443, "cve_id": "CVE-2026-91996", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dromara", "product": "lamp-cloud", "cwe": "CWE-306", "title": "lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91996" }, { "rank": 444, "cve_id": "CVE-2026-92000", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "cthackers", "product": "adm-zip", "cwe": "CWE-409", "title": "adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92000" }, { "rank": 445, "cve_id": "CVE-2026-55691", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "StarCitizenWiki", "product": "mediawiki-extensions-EmbedVideo", "cwe": "CWE-79", "title": "EmbedVideo Extension : Stored XSS via unsanitized class passed to template", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55691" }, { "rank": 446, "cve_id": "CVE-2026-57586", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "naranor", "product": "agent-coderag", "cwe": "CWE-78", "title": "CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57586" }, { "rank": 447, "cve_id": "CVE-2026-73941", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73941" }, { "rank": 448, "cve_id": "CVE-2026-76679", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76679" }, { "rank": 449, "cve_id": "CVE-2026-76866", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-88", "title": "Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76866" }, { "rank": 450, "cve_id": "CVE-2026-76869", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-121", "title": "Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76869" }, { "rank": 451, "cve_id": "CVE-2026-81236", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite", "cwe": "CWE-434", "title": "Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81236" }, { "rank": 452, "cve_id": "CVE-2026-81239", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite", "cwe": "CWE-434", "title": "Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81239" }, { "rank": 453, "cve_id": "CVE-2026-81240", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite", "cwe": "CWE-434", "title": "Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81240" }, { "rank": 454, "cve_id": "CVE-2026-83023", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83023" }, { "rank": 455, "cve_id": "CVE-2026-83074", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "cwe": null, "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSH to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83074" }, { "rank": 456, "cve_id": "CVE-2026-83093", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. While the vulnerability is in Oracle Forms, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Forms accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83093" }, { "rank": 457, "cve_id": "CVE-2026-83203", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM End User", "cwe": null, "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM End User accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM End User accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM End User. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83203" }, { "rank": 458, "cve_id": "CVE-2026-83284", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle BI Publisher as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data and unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83284" }, { "rank": 459, "cve_id": "CVE-2026-83305", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83305" }, { "rank": 460, "cve_id": "CVE-2026-87273", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87273" }, { "rank": 461, "cve_id": "CVE-2026-11729", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "MQ", "cwe": "CWE-502", "title": "IBM MQ Java messaging is vulnerable to remote code execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11729" }, { "rank": 462, "cve_id": "CVE-2026-18111", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-306", "title": "Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity verification", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18111" }, { "rank": 463, "cve_id": "CVE-2026-59973", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "agentfront", "product": "frontmcp", "cwe": "CWE-918", "title": "mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59973" }, { "rank": 464, "cve_id": "CVE-2026-76680", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76680" }, { "rank": 465, "cve_id": "CVE-2026-76681", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76681" }, { "rank": 466, "cve_id": "CVE-2026-81894", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-89", "title": "Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81894" }, { "rank": 467, "cve_id": "CVE-2026-81895", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-89", "title": "Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81895" }, { "rank": 468, "cve_id": "CVE-2026-82993", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82993" }, { "rank": 469, "cve_id": "CVE-2026-83002", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager. While the vulnerability is in Oracle Access Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83002" }, { "rank": 470, "cve_id": "CVE-2026-83003", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Enterprise Capture accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Enterprise Capture accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83003" }, { "rank": 471, "cve_id": "CVE-2026-83007", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Enterprise Capture accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Enterprise Capture accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83007" }, { "rank": 472, "cve_id": "CVE-2026-83045", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83045" }, { "rank": 473, "cve_id": "CVE-2026-83049", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83049" }, { "rank": 474, "cve_id": "CVE-2026-83083", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Marketing", "cwe": null, "title": "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerability is in Oracle Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83083" }, { "rank": 475, "cve_id": "CVE-2026-83172", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Sales Online", "cwe": null, "title": "Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: OSO Other). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online. While the vulnerability is in Oracle Sales Online, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Sales Online accessible data as well as unauthorized update, insert or delete access to some of Oracle Sales Online accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83172" }, { "rank": 476, "cve_id": "CVE-2026-83267", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83267" }, { "rank": 477, "cve_id": "CVE-2026-83272", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": null, "title": "Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Create Index privilege with network access via Oracle Net to compromise Oracle Text. While the vulnerability is in Oracle Text, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Text. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83272" }, { "rank": 478, "cve_id": "CVE-2026-83302", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 8.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83302" }, { "rank": 479, "cve_id": "CVE-2026-83303", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle BI Publisher accessible data as well as unauthorized read access to a subset of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83303" }, { "rank": 480, "cve_id": "CVE-2026-83309", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83309" }, { "rank": 481, "cve_id": "CVE-2026-83311", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83311" }, { "rank": 482, "cve_id": "CVE-2026-83321", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Actions). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83321" }, { "rank": 483, "cve_id": "CVE-2026-83425", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Complex Maintenance, Repair and Overhaul", "cwe": null, "title": "Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul. While the vulnerability is in Oracle Complex Maintenance, Repair and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Complex Maintenance, Repair and Overhaul accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Complex Maintenance, Repair and Overhaul. CVSS 3.1 Base Score 8.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83425" }, { "rank": 484, "cve_id": "CVE-2026-83449", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Bills of Material", "cwe": null, "title": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. While the vulnerability is in Oracle Bills of Material, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Bills of Material accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Bills of Material. CVSS 3.1 Base Score 8.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83449" }, { "rank": 485, "cve_id": "CVE-2026-83451", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Workbench", "cwe": null, "title": "Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. While the vulnerability is in Oracle Product Workbench, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Product Workbench. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83451" }, { "rank": 486, "cve_id": "CVE-2026-83490", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle iRecruitment", "cwe": null, "title": "Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. While the vulnerability is in Oracle iRecruitment, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iRecruitment accessible data as well as unauthorized update, insert or delete access to some of Oracle iRecruitment accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83490" }, { "rank": 487, "cve_id": "CVE-2026-87161", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle HRMS (India)", "cwe": null, "title": "Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (India). While the vulnerability is in Oracle HRMS (India), attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HRMS (India) accessible data as well as unauthorized update, insert or delete access to some of Oracle HRMS (India) accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87161" }, { "rank": 488, "cve_id": "CVE-2026-87177", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87177" }, { "rank": 489, "cve_id": "CVE-2026-88765", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-77", "title": "Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88765" }, { "rank": 490, "cve_id": "CVE-2026-57441", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "bitbonsai", "product": "mcpvault", "cwe": "CWE-41", "title": "MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57441" }, { "rank": 491, "cve_id": "CVE-2026-81896", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-79", "title": "Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Label", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81896" }, { "rank": 492, "cve_id": "CVE-2026-83264", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Lifecycle Analytics", "cwe": null, "title": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes to compromise Oracle Product Lifecycle Analytics. While the vulnerability is in Oracle Product Lifecycle Analytics, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Lifecycle Analytics accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Lifecycle Analytics accessible data. CVSS 3.1 Base Score 8.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83264" }, { "rank": 493, "cve_id": "CVE-2026-87219", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87219" }, { "rank": 494, "cve_id": "CVE-2026-87259", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile Engineering Data Management", "cwe": null, "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. While the vulnerability is in Oracle Agile Engineering Data Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile Engineering Data Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 8.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87259" }, { "rank": 495, "cve_id": "CVE-2026-91924", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sosedoff", "product": "pgweb", "cwe": "CWE-862", "title": "pgweb through 0.17.0 Missing Authorization on Direct Connect Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91924" }, { "rank": 496, "cve_id": "CVE-2026-1758", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Secomea", "product": "GateManager", "cwe": "CWE-384", "title": "Session Fixation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-1758" }, { "rank": 497, "cve_id": "CVE-2026-54549", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pipeboard-co", "product": "meta-ads-mcp", "cwe": "CWE-918", "title": "Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54549" }, { "rank": 498, "cve_id": "CVE-2026-63443", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "coder", "product": "coder", "cwe": "CWE-863", "title": "Coder: Workspace agent API insecure redirect handling allowed cross-agent file read and write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63443" }, { "rank": 499, "cve_id": "CVE-2026-83026", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83026" }, { "rank": 500, "cve_id": "CVE-2026-83030", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Managed File Transfer", "cwe": null, "title": "Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Managed File Transfer. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Managed File Transfer accessible data as well as unauthorized read access to a subset of Oracle Managed File Transfer accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Managed File Transfer. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83030" }, { "rank": 501, "cve_id": "CVE-2026-83285", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83285" }, { "rank": 502, "cve_id": "CVE-2026-83307", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle BI Publisher accessible data as well as unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83307" }, { "rank": 503, "cve_id": "CVE-2026-87125", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Financials for Asia/Pacific", "cwe": null, "title": "Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials for Asia/Pacific. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financials for Asia/Pacific accessible data as well as unauthorized access to critical data or complete access to all Oracle Financials for Asia/Pacific accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Financials for Asia/Pacific. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87125" }, { "rank": 504, "cve_id": "CVE-2026-87210", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87210" }, { "rank": 505, "cve_id": "CVE-2026-91712", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-367", "title": "Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91712" }, { "rank": 506, "cve_id": "CVE-2026-91724", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91724" }, { "rank": 507, "cve_id": "CVE-2026-91733", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-754", "title": "Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91733" }, { "rank": 508, "cve_id": "CVE-2026-91735", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-863", "title": "Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91735" }, { "rank": 509, "cve_id": "CVE-2026-91743", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-367", "title": "Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91743" }, { "rank": 510, "cve_id": "CVE-2026-91748", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-367", "title": "Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91748" }, { "rank": 511, "cve_id": "CVE-2026-91923", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "kubesphere", "product": "kubesphere", "cwe": "CWE-918", "title": "KubeSphere through 4.1.3 SSRF via git credential verification endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91923" }, { "rank": 512, "cve_id": "CVE-2026-91936", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-78", "title": "Flowise before 3.1.4 Script Injection via Docker Workflows", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91936" }, { "rank": 513, "cve_id": "CVE-2026-91943", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "unclecode", "product": "crawl4ai", "cwe": "CWE-918", "title": "Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91943" }, { "rank": 514, "cve_id": "CVE-2026-54167", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "tektoncd", "product": "pipelines-as-code", "cwe": "CWE-345", "title": "Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54167" }, { "rank": 515, "cve_id": "CVE-2026-61544", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libp2p", "product": "rust-libp2p", "cwe": "CWE-248", "title": "libp2p-quic: Remote panic via certificate expiry race during QUIC handshake", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61544" }, { "rank": 516, "cve_id": "CVE-2026-76682", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76682" }, { "rank": 517, "cve_id": "CVE-2026-83047", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83047" }, { "rank": 518, "cve_id": "CVE-2026-83078", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "cwe": null, "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83078" }, { "rank": 519, "cve_id": "CVE-2026-83085", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "cwe": null, "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83085" }, { "rank": 520, "cve_id": "CVE-2026-83087", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "cwe": null, "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Cloud Applications accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83087" }, { "rank": 521, "cve_id": "CVE-2026-83181", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Development", "cwe": null, "title": "Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workspaces). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Development accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Development. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83181" }, { "rank": 522, "cve_id": "CVE-2026-83215", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83215" }, { "rank": 523, "cve_id": "CVE-2026-83234", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83234" }, { "rank": 524, "cve_id": "CVE-2026-83236", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83236" }, { "rank": 525, "cve_id": "CVE-2026-83248", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager and unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83248" }, { "rank": 526, "cve_id": "CVE-2026-83265", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Web Services Manager", "cwe": null, "title": "Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Agent). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Services Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Services Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Web Services Manager accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83265" }, { "rank": 527, "cve_id": "CVE-2026-83266", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle JDeveloper", "cwe": null, "title": "Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Resource Catalog Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle JDeveloper accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle JDeveloper. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83266" }, { "rank": 528, "cve_id": "CVE-2026-83343", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Utilities Network Management System", "cwe": null, "title": "Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and 25.12.0.0.0-25.12.0.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Utilities Network Management System. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Utilities Network Management System accessible data as well as unauthorized update, insert or delete access to some of Oracle Utilities Network Management System accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83343" }, { "rank": 529, "cve_id": "CVE-2026-83418", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Communications Cloud Native Core Security Edge Protection Proxy", "cwe": null, "title": "Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affected are 26.1.200 and 25.2.201. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Cloud Native Core Security Edge Protection Proxy. While the vulnerability is in Oracle Communications Cloud Native Core Security Edge Protection Proxy, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Communications Cloud Native Core Security Edge Protection Proxy accessible data as well as unauthorized access to critical data or complete access to all Oracle Communications Cloud Native Core Security Edge Protection Proxy accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83418" }, { "rank": 530, "cve_id": "CVE-2026-83435", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Bills of Material", "cwe": null, "title": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.13-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. While the vulnerability is in Oracle Bills of Material, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Bills of Material accessible data as well as unauthorized access to critical data or complete access to all Oracle Bills of Material accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83435" }, { "rank": 531, "cve_id": "CVE-2026-83438", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Engineering", "cwe": null, "title": "Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. While the vulnerability is in Oracle Engineering, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Engineering accessible data as well as unauthorized access to critical data or complete access to all Oracle Engineering accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83438" }, { "rank": 532, "cve_id": "CVE-2026-83461", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Mobile Application Server", "cwe": null, "title": "Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Mobile Application Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Mobile Application Server. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83461" }, { "rank": 533, "cve_id": "CVE-2026-83465", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Mobile Application Server", "cwe": null, "title": "Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Application Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Mobile Application Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Mobile Application Server as well as unauthorized update, insert or delete access to some of Oracle Mobile Application Server accessible data. CVSS 3.1 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83465" }, { "rank": 534, "cve_id": "CVE-2026-87174", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87174" }, { "rank": 535, "cve_id": "CVE-2026-87196", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87196" }, { "rank": 536, "cve_id": "CVE-2026-87197", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87197" }, { "rank": 537, "cve_id": "CVE-2026-87200", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87200" }, { "rank": 538, "cve_id": "CVE-2026-87228", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87228" }, { "rank": 539, "cve_id": "CVE-2026-87229", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized read access to a subset of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87229" }, { "rank": 540, "cve_id": "CVE-2026-87266", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87266" }, { "rank": 541, "cve_id": "CVE-2026-91955", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-369", "title": "FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91955" }, { "rank": 542, "cve_id": "CVE-2026-91992", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "tornadoweb", "product": "tornado", "cwe": "CWE-200", "title": "Tornado before 6.5.7 Credential Leak via Handle Reuse", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91992" }, { "rank": 543, "cve_id": "CVE-2026-11728", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "MQ", "cwe": "CWE-787", "title": "IBM MQ .NET client is vulnerable to remote code execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11728" }, { "rank": 544, "cve_id": "CVE-2026-12355", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "MQ", "cwe": "CWE-74", "title": "IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12355" }, { "rank": 545, "cve_id": "CVE-2026-12666", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "MQ", "cwe": "CWE-611", "title": "IBM MQ Java messaging is vulnerable to XML external entity injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12666" }, { "rank": 546, "cve_id": "CVE-2026-16141", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenBMC", "product": "phosphor-net-ipmid", "cwe": "CWE-457", "title": "OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16141" }, { "rank": 547, "cve_id": "CVE-2026-54076", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ArcadeData", "product": "arcadedb", "cwe": "CWE-862", "title": "ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54076" }, { "rank": 548, "cve_id": "CVE-2026-56825", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "shopperlabs", "product": "shopper", "cwe": "CWE-862", "title": "Shopper: Missing authorization on product removal actions in CollectionProducts component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56825" }, { "rank": 549, "cve_id": "CVE-2026-56827", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "shopperlabs", "product": "shopper", "cwe": "CWE-862", "title": "Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56827" }, { "rank": 550, "cve_id": "CVE-2026-56829", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "shopperlabs", "product": "shopper", "cwe": "CWE-862", "title": "Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56829" }, { "rank": 551, "cve_id": "CVE-2026-61668", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "DIRACGrid", "product": "DIRAC", "cwe": "CWE-295", "title": "DIRAC: Pilot code downloaded over unverified HTTPS connection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61668" }, { "rank": 552, "cve_id": "CVE-2026-73951", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73951" }, { "rank": 553, "cve_id": "CVE-2026-73954", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73954" }, { "rank": 554, "cve_id": "CVE-2026-73958", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73958" }, { "rank": 555, "cve_id": "CVE-2026-76683", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76683" }, { "rank": 556, "cve_id": "CVE-2026-76684", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76684" }, { "rank": 557, "cve_id": "CVE-2026-76685", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76685" }, { "rank": 558, "cve_id": "CVE-2026-79410", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-20", "title": "Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79410" }, { "rank": 559, "cve_id": "CVE-2026-79425", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-918", "title": "An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79425" }, { "rank": 560, "cve_id": "CVE-2026-83010", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Enterprise Capture accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Enterprise Capture accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83010" }, { "rank": 561, "cve_id": "CVE-2026-83011", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Platform Security for Java", "cwe": null, "title": "Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83011" }, { "rank": 562, "cve_id": "CVE-2026-83014", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83014" }, { "rank": 563, "cve_id": "CVE-2026-83019", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83019" }, { "rank": 564, "cve_id": "CVE-2026-83067", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle JDeveloper", "cwe": null, "title": "Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle JDeveloper accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle JDeveloper. CVSS 3.1 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83067" }, { "rank": 565, "cve_id": "CVE-2026-83072", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Framework", "cwe": null, "title": "Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl. Advanced]). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Framework accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Framework accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83072" }, { "rank": 566, "cve_id": "CVE-2026-83073", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "cwe": null, "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Cloud Applications accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83073" }, { "rank": 567, "cve_id": "CVE-2026-83089", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Alert", "cwe": null, "title": "Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Alert. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Alert accessible data as well as unauthorized access to critical data or complete access to all Oracle Alert accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83089" }, { "rank": 568, "cve_id": "CVE-2026-83101", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83101" }, { "rank": 569, "cve_id": "CVE-2026-83132", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle iStore", "cwe": null, "title": "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iStore accessible data as well as unauthorized access to critical data or complete access to all Oracle iStore accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83132" }, { "rank": 570, "cve_id": "CVE-2026-83143", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel Apps - Life Sciences", "cwe": null, "title": "Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Life Sciences. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel Apps - Life Sciences accessible data as well as unauthorized access to critical data or complete access to all Siebel Apps - Life Sciences accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83143" }, { "rank": 571, "cve_id": "CVE-2026-83152", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Project Intelligence", "cwe": null, "title": "Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Intelligence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Project Intelligence accessible data as well as unauthorized access to critical data or complete access to all Oracle Project Intelligence accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83152" }, { "rank": 572, "cve_id": "CVE-2026-83169", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle One-to-One Fulfillment", "cwe": null, "title": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in takeover of Oracle One-to-One Fulfillment. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83169" }, { "rank": 573, "cve_id": "CVE-2026-83174", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle CRM Technical Foundation", "cwe": null, "title": "Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Application Framework). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle CRM Technical Foundation accessible data as well as unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83174" }, { "rank": 574, "cve_id": "CVE-2026-83177", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle One-to-One Fulfillment", "cwe": null, "title": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle One-to-One Fulfillment accessible data as well as unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83177" }, { "rank": 575, "cve_id": "CVE-2026-83191", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83191" }, { "rank": 576, "cve_id": "CVE-2026-83192", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM End User", "cwe": null, "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in takeover of Siebel CRM End User. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83192" }, { "rank": 577, "cve_id": "CVE-2026-83220", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Integration", "cwe": null, "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and Subscribe). Supported versions that are affected are 23.6-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Integration executes to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Integration accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83220" }, { "rank": 578, "cve_id": "CVE-2026-83245", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83245" }, { "rank": 579, "cve_id": "CVE-2026-83246", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83246" }, { "rank": 580, "cve_id": "CVE-2026-83254", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83254" }, { "rank": 581, "cve_id": "CVE-2026-83255", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83255" }, { "rank": 582, "cve_id": "CVE-2026-83256", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83256" }, { "rank": 583, "cve_id": "CVE-2026-83258", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83258" }, { "rank": 584, "cve_id": "CVE-2026-83286", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83286" }, { "rank": 585, "cve_id": "CVE-2026-83297", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle BI Publisher accessible data as well as unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83297" }, { "rank": 586, "cve_id": "CVE-2026-83299", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83299" }, { "rank": 587, "cve_id": "CVE-2026-83308", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle BI Publisher accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83308" }, { "rank": 588, "cve_id": "CVE-2026-83314", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle BI Publisher accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83314" }, { "rank": 589, "cve_id": "CVE-2026-83351", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": null, "title": "Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability can result in takeover of RDBMS. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83351" }, { "rank": 590, "cve_id": "CVE-2026-83357", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle GraalVM for JDK, Oracle GraalVM", "cwe": null, "title": "Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK, Oracle GraalVM. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM for JDK, Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83357" }, { "rank": 591, "cve_id": "CVE-2026-83408", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle GraalVM for JDK, Oracle GraalVM", "cwe": null, "title": "Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK, Oracle GraalVM. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM for JDK, Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83408" }, { "rank": 592, "cve_id": "CVE-2026-83412", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Coherence", "cwe": null, "title": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Coherence accessible data as well as unauthorized access to critical data or complete access to all Oracle Coherence accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83412" }, { "rank": 593, "cve_id": "CVE-2026-83422", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Identity Manager accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83422" }, { "rank": 594, "cve_id": "CVE-2026-83428", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Demand Signal Repository", "cwe": null, "title": "Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Demand Signal Repository accessible data as well as unauthorized access to critical data or complete access to all Oracle Demand Signal Repository accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83428" }, { "rank": 595, "cve_id": "CVE-2026-83429", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Demand Signal Repository", "cwe": null, "title": "Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Demand Signal Repository accessible data as well as unauthorized access to critical data or complete access to all Oracle Demand Signal Repository accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83429" }, { "rank": 596, "cve_id": "CVE-2026-83430", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Workbench", "cwe": null, "title": "Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Workbench accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Workbench accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83430" }, { "rank": 597, "cve_id": "CVE-2026-83432", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Depot Repair", "cwe": null, "title": "Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Depot Repair accessible data as well as unauthorized access to critical data or complete access to all Oracle Depot Repair accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83432" }, { "rank": 598, "cve_id": "CVE-2026-83434", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Workbench", "cwe": null, "title": "Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Workbench accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Workbench accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83434" }, { "rank": 599, "cve_id": "CVE-2026-83439", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": null, "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83439" }, { "rank": 600, "cve_id": "CVE-2026-83446", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Financials Common Modules", "cwe": null, "title": "Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials Common Modules. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financials Common Modules accessible data as well as unauthorized access to critical data or complete access to all Oracle Financials Common Modules accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83446" }, { "rank": 601, "cve_id": "CVE-2026-83447", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Bills of Material", "cwe": null, "title": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Bills of Material accessible data as well as unauthorized access to critical data or complete access to all Oracle Bills of Material accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83447" }, { "rank": 602, "cve_id": "CVE-2026-83448", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Bills of Material", "cwe": null, "title": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Bills of Material accessible data as well as unauthorized access to critical data or complete access to all Oracle Bills of Material accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83448" }, { "rank": 603, "cve_id": "CVE-2026-83455", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Demand Signal Repository", "cwe": null, "title": "Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Demand Signal Repository accessible data as well as unauthorized access to critical data or complete access to all Oracle Demand Signal Repository accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83455" }, { "rank": 604, "cve_id": "CVE-2026-83457", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Demand Signal Repository", "cwe": null, "title": "Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Demand Signal Repository accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Demand Signal Repository. CVSS 3.1 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83457" }, { "rank": 605, "cve_id": "CVE-2026-83464", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Mobile Application Server", "cwe": null, "title": "Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Application Server. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83464" }, { "rank": 606, "cve_id": "CVE-2026-83477", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Work in Process", "cwe": null, "title": "Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Work in Process executes to compromise Oracle Work in Process. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Work in Process accessible data as well as unauthorized access to critical data or complete access to all Oracle Work in Process accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83477" }, { "rank": 607, "cve_id": "CVE-2026-87152", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Installed Base", "cwe": null, "title": "Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Installed Base accessible data as well as unauthorized access to critical data or complete access to all Oracle Installed Base accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87152" }, { "rank": 608, "cve_id": "CVE-2026-87153", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Hub accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87153" }, { "rank": 609, "cve_id": "CVE-2026-87154", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Hub accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87154" }, { "rank": 610, "cve_id": "CVE-2026-87157", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Order Management", "cwe": null, "title": "Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Order Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87157" }, { "rank": 611, "cve_id": "CVE-2026-87159", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle HRMS (India)", "cwe": null, "title": "Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (India). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HRMS (India) accessible data as well as unauthorized access to critical data or complete access to all Oracle HRMS (India) accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87159" }, { "rank": 612, "cve_id": "CVE-2026-87166", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Purchasing", "cwe": null, "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Purchasing accessible data as well as unauthorized access to critical data or complete access to all Oracle Purchasing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87166" }, { "rank": 613, "cve_id": "CVE-2026-87167", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Purchasing", "cwe": null, "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Purchasing accessible data as well as unauthorized access to critical data or complete access to all Oracle Purchasing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87167" }, { "rank": 614, "cve_id": "CVE-2026-87168", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Purchasing", "cwe": null, "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Purchasing accessible data as well as unauthorized access to critical data or complete access to all Oracle Purchasing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87168" }, { "rank": 615, "cve_id": "CVE-2026-87218", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87218" }, { "rank": 616, "cve_id": "CVE-2026-87231", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87231" }, { "rank": 617, "cve_id": "CVE-2026-87232", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87232" }, { "rank": 618, "cve_id": "CVE-2026-87234", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87234" }, { "rank": 619, "cve_id": "CVE-2026-87241", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87241" }, { "rank": 620, "cve_id": "CVE-2026-87265", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Purchasing", "cwe": null, "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Purchasing accessible data as well as unauthorized access to critical data or complete access to all Oracle Purchasing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87265" }, { "rank": 621, "cve_id": "CVE-2026-87286", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle GraalVM", "cwe": null, "title": "Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87286" }, { "rank": 622, "cve_id": "CVE-2026-87287", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle GraalVM", "cwe": null, "title": "Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87287" }, { "rank": 623, "cve_id": "CVE-2026-87288", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle GraalVM", "cwe": null, "title": "Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87288" }, { "rank": 624, "cve_id": "CVE-2026-88619", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-862", "title": "1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endpoints without method-level permission checks, allowing a low-privileged authenticated user to access functionality intended for authorized administrators.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88619" }, { "rank": 625, "cve_id": "CVE-2026-91727", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-706", "title": "Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91727" }, { "rank": 626, "cve_id": "CVE-2026-55225", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "strimzi", "product": "strimzi-kafka-operator", "cwe": "CWE-269", "title": "Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55225" }, { "rank": 627, "cve_id": "CVE-2026-55343", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-120", "title": "In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55343" }, { "rank": 628, "cve_id": "CVE-2026-56967", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-122", "title": "In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56967" }, { "rank": 629, "cve_id": "CVE-2026-58704", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-285", "title": "In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58704" }, { "rank": 630, "cve_id": "CVE-2026-81235", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite", "cwe": "CWE-325", "title": "Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81235" }, { "rank": 631, "cve_id": "CVE-2026-83081", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Banking Corporate Lending", "cwe": null, "title": "Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Banking Corporate Lending executes to compromise Oracle Banking Corporate Lending. While the vulnerability is in Oracle Banking Corporate Lending, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Corporate Lending accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Corporate Lending accessible data. CVSS 3.1 Base Score 8.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83081" }, { "rank": 632, "cve_id": "CVE-2026-83138", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Spares Management", "cwe": null, "title": "Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Spares Management. While the vulnerability is in Oracle Spares Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Spares Management. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83138" }, { "rank": 633, "cve_id": "CVE-2026-83157", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Manager", "cwe": null, "title": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. While the vulnerability is in Oracle Applications Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Applications Manager. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83157" }, { "rank": 634, "cve_id": "CVE-2026-83170", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle One-to-One Fulfillment", "cwe": null, "title": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle One-to-One Fulfillment executes to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in takeover of Oracle One-to-One Fulfillment. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83170" }, { "rank": 635, "cve_id": "CVE-2026-83178", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Application Object Library", "cwe": null, "title": "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application Object Library. While the vulnerability is in Oracle Application Object Library, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83178" }, { "rank": 636, "cve_id": "CVE-2026-83450", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Bills of Material", "cwe": null, "title": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of Material. While the vulnerability is in Oracle Bills of Material, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Bills of Material. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83450" }, { "rank": 637, "cve_id": "CVE-2026-83483", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Advanced Benefits", "cwe": null, "title": "Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. While the vulnerability is in Oracle Advanced Benefits, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Advanced Benefits. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83483" }, { "rank": 638, "cve_id": "CVE-2026-87164", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Banking Branch", "cwe": null, "title": "Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Branch. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Banking Branch, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Banking Branch. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87164" }, { "rank": 639, "cve_id": "CVE-2026-87243", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87243" }, { "rank": 640, "cve_id": "CVE-2026-87245", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87245" }, { "rank": 641, "cve_id": "CVE-2026-83022", "cvss_base": 7.9, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle WebCenter Enterprise Capture executes to compromise Oracle WebCenter Enterprise Capture. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 7.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83022" }, { "rank": 642, "cve_id": "CVE-2026-83079", "cvss_base": 7.9, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "cwe": null, "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Cloud Applications accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 7.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83079" }, { "rank": 643, "cve_id": "CVE-2026-83096", "cvss_base": 7.9, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Forms. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Forms, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Forms accessible data as well as unauthorized access to critical data or complete access to all Oracle Forms accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Forms. CVSS 3.1 Base Score 7.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83096" }, { "rank": 644, "cve_id": "CVE-2026-0199", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0199" }, { "rank": 645, "cve_id": "CVE-2026-19781", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Ashlar-Vellum", "product": "Cobalt", "cwe": "CWE-122", "title": "Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19781" }, { "rank": 646, "cve_id": "CVE-2026-19885", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OriginLab", "product": "Origin Viewer", "cwe": "CWE-787", "title": "OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19885" }, { "rank": 647, "cve_id": "CVE-2026-19886", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OriginLab", "product": "Origin Viewer", "cwe": "CWE-119", "title": "OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19886" }, { "rank": 648, "cve_id": "CVE-2026-55323", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-122", "title": "In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55323" }, { "rank": 649, "cve_id": "CVE-2026-55351", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-190", "title": "In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55351" }, { "rank": 650, "cve_id": "CVE-2026-55864", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "geonetwork", "product": "core-geonetwork", "cwe": "CWE-918", "title": "GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55864" }, { "rank": 651, "cve_id": "CVE-2026-56945", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-441", "title": "In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56945" }, { "rank": 652, "cve_id": "CVE-2026-57014", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57014" }, { "rank": 653, "cve_id": "CVE-2026-58744", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58744" }, { "rank": 654, "cve_id": "CVE-2026-58766", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-693", "title": "In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58766" }, { "rank": 655, "cve_id": "CVE-2026-82992", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82992" }, { "rank": 656, "cve_id": "CVE-2026-82996", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Platform Security for Java", "cwe": null, "title": "Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Platform Security for Java executes to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82996" }, { "rank": 657, "cve_id": "CVE-2026-83018", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83018" }, { "rank": 658, "cve_id": "CVE-2026-83024", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83024" }, { "rank": 659, "cve_id": "CVE-2026-83071", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83071" }, { "rank": 660, "cve_id": "CVE-2026-83118", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Applications DBA", "cwe": null, "title": "Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83118" }, { "rank": 661, "cve_id": "CVE-2026-83147", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise FIN Inventory Brazil", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Inventory Brazil executes to compromise PeopleSoft Enterprise FIN Inventory Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Inventory Brazil. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83147" }, { "rank": 662, "cve_id": "CVE-2026-83159", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Applications DBA", "cwe": null, "title": "Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83159" }, { "rank": 663, "cve_id": "CVE-2026-83211", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83211" }, { "rank": 664, "cve_id": "CVE-2026-83214", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83214" }, { "rank": 665, "cve_id": "CVE-2026-83216", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83216" }, { "rank": 666, "cve_id": "CVE-2026-83247", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83247" }, { "rank": 667, "cve_id": "CVE-2026-83249", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83249" }, { "rank": 668, "cve_id": "CVE-2026-83253", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83253" }, { "rank": 669, "cve_id": "CVE-2026-83288", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83288" }, { "rank": 670, "cve_id": "CVE-2026-83290", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83290" }, { "rank": 671, "cve_id": "CVE-2026-83291", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83291" }, { "rank": 672, "cve_id": "CVE-2026-83293", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: FNDN). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83293" }, { "rank": 673, "cve_id": "CVE-2026-83294", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83294" }, { "rank": 674, "cve_id": "CVE-2026-83317", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Installation). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83317" }, { "rank": 675, "cve_id": "CVE-2026-83336", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83336" }, { "rank": 676, "cve_id": "CVE-2026-83337", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Middleware Common Libraries and Tools", "cwe": null, "title": "Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Middleware Common Libraries and Tools executes to compromise Oracle Middleware Common Libraries and Tools. Successful attacks of this vulnerability can result in takeover of Oracle Middleware Common Libraries and Tools. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83337" }, { "rank": 677, "cve_id": "CVE-2026-83342", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Utilities Network Management System", "cwe": null, "title": "Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.19, 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and 25.12.0.0.0-25.12.0.0.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Utilities Network Management System executes to compromise Oracle Utilities Network Management System. Successful attacks of this vulnerability can result in takeover of Oracle Utilities Network Management System. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83342" }, { "rank": 678, "cve_id": "CVE-2026-83353", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Content", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle WebCenter Content executes to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83353" }, { "rank": 679, "cve_id": "CVE-2026-83420", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise FIN Engineering Brazil", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft (component: Engineering). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Engineering Brazil executes to compromise PeopleSoft Enterprise FIN Engineering Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Engineering Brazil. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83420" }, { "rank": 680, "cve_id": "CVE-2026-87216", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87216" }, { "rank": 681, "cve_id": "CVE-2026-87268", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: This vulnerability applies to Windows host only. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87268" }, { "rank": 682, "cve_id": "CVE-2026-87269", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: This vulnerability applies to Windows host only. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87269" }, { "rank": 683, "cve_id": "CVE-2026-87270", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: This vulnerability applies to Windows host only. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87270" }, { "rank": 684, "cve_id": "CVE-2026-87271", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: This vulnerability applies to Windows host only. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87271" }, { "rank": 685, "cve_id": "CVE-2026-87272", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87272" }, { "rank": 686, "cve_id": "CVE-2026-92176", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pdfforge", "product": "PDF Architect", "cwe": "CWE-125", "title": "pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92176" }, { "rank": 687, "cve_id": "CVE-2026-92177", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pdfforge", "product": "PDF Architect", "cwe": "CWE-787", "title": "pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92177" }, { "rank": 688, "cve_id": "CVE-2026-92178", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pdfforge", "product": "PDF Architect", "cwe": "CWE-119", "title": "pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92178" }, { "rank": 689, "cve_id": "CVE-2026-92179", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pdfforge", "product": "PDF Architect", "cwe": "CWE-787", "title": "pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92179" }, { "rank": 690, "cve_id": "CVE-2026-92180", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pdfforge", "product": "PDF Architect", "cwe": "CWE-427", "title": "pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92180" }, { "rank": 691, "cve_id": "CVE-2026-92248", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-190", "title": "Gimp: integer overflow when generating a thumbnail preview for a psd file", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92248" }, { "rank": 692, "cve_id": "CVE-2026-13210", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13210" }, { "rank": 693, "cve_id": "CVE-2026-19407", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google Cloud", "product": "Gemini Enterprise Agent Platform SDK for Python", "cwe": "CWE-330", "title": "GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19407" }, { "rank": 694, "cve_id": "CVE-2026-53957", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "contentful", "product": "contentful-mcp-server", "cwe": "CWE-918", "title": "Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53957" }, { "rank": 695, "cve_id": "CVE-2026-65831", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ArcadeData", "product": "arcadedb", "cwe": "CWE-269", "title": "ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65831" }, { "rank": 696, "cve_id": "CVE-2026-76820", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenCTI-Platform", "product": "opencti", "cwe": "CWE-918", "title": "OpenCTI: Synchronizer SSRF: stream fetch has no URL validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76820" }, { "rank": 697, "cve_id": "CVE-2026-81897", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-79", "title": "Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via Express form Text control save_control", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81897" }, { "rank": 698, "cve_id": "CVE-2026-83012", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Enterprise Capture accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83012" }, { "rank": 699, "cve_id": "CVE-2026-83041", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83041" }, { "rank": 700, "cve_id": "CVE-2026-83048", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83048" }, { "rank": 701, "cve_id": "CVE-2026-83068", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Enterprise Manager for Oracle Database", "cwe": null, "title": "Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core). The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager for Oracle Database. While the vulnerability is in Oracle Enterprise Manager for Oracle Database, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager for Oracle Database accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83068" }, { "rank": 702, "cve_id": "CVE-2026-83070", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PRTL Interaction Hub", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: Enterprise Portal). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PRTL Interaction Hub. While the vulnerability is in PeopleSoft Enterprise PRTL Interaction Hub, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PRTL Interaction Hub accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83070" }, { "rank": 703, "cve_id": "CVE-2026-83084", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Marketing", "cwe": null, "title": "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerability is in Oracle Marketing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83084" }, { "rank": 704, "cve_id": "CVE-2026-83088", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": null, "title": "Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise RDBMS. While the vulnerability is in RDBMS, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of RDBMS. CVSS 3.1 Base Score 7.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83088" }, { "rank": 705, "cve_id": "CVE-2026-83116", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Order Management", "cwe": null, "title": "Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. While the vulnerability is in Oracle Order Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83116" }, { "rank": 706, "cve_id": "CVE-2026-83127", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Sales Offline", "cwe": null, "title": "Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Offline. While the vulnerability is in Oracle Sales Offline, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Sales Offline accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83127" }, { "rank": 707, "cve_id": "CVE-2026-83129", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Sales", "cwe": null, "title": "Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales. While the vulnerability is in Oracle Sales, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Sales accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83129" }, { "rank": 708, "cve_id": "CVE-2026-83131", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Web Applications Desktop Integrator", "cwe": null, "title": "Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Web Applications Desktop Integrator. While the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Applications Desktop Integrator accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83131" }, { "rank": 709, "cve_id": "CVE-2026-83134", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle iStore", "cwe": null, "title": "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. While the vulnerability is in Oracle iStore, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83134" }, { "rank": 710, "cve_id": "CVE-2026-83141", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Field Service", "cwe": null, "title": "Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service. While the vulnerability is in Oracle Field Service, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Field Service accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83141" }, { "rank": 711, "cve_id": "CVE-2026-83142", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Proposals", "cwe": null, "title": "Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. While the vulnerability is in Oracle Proposals, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Proposals accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83142" }, { "rank": 712, "cve_id": "CVE-2026-83146", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM End User", "cwe": null, "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel CRM End User, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM End User accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM End User accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83146" }, { "rank": 713, "cve_id": "CVE-2026-83166", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Customer Interaction History", "cwe": null, "title": "Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer Interaction History. While the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83166" }, { "rank": 714, "cve_id": "CVE-2026-83233", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83233" }, { "rank": 715, "cve_id": "CVE-2026-83243", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. While the vulnerability is in Oracle Commerce Guided Search / Oracle Commerce Experience Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83243" }, { "rank": 716, "cve_id": "CVE-2026-83287", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83287" }, { "rank": 717, "cve_id": "CVE-2026-83312", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: E-Business Suite - XDO). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83312" }, { "rank": 718, "cve_id": "CVE-2026-83313", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83313" }, { "rank": 719, "cve_id": "CVE-2026-83319", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83319" }, { "rank": 720, "cve_id": "CVE-2026-83356", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Enterprise Command Center Framework", "cwe": null, "title": "Vulnerability in the Enterprise Command Center Framework product of Oracle E-Business Suite (component: Security). The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Command Center Framework. While the vulnerability is in Enterprise Command Center Framework, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Command Center Framework accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83356" }, { "rank": 721, "cve_id": "CVE-2026-83437", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Engineering", "cwe": null, "title": "Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. While the vulnerability is in Oracle Engineering, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Engineering accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83437" }, { "rank": 722, "cve_id": "CVE-2026-83485", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the vulnerability is in Oracle Product Hub, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83485" }, { "rank": 723, "cve_id": "CVE-2026-83486", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the vulnerability is in Oracle Product Hub, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83486" }, { "rank": 724, "cve_id": "CVE-2026-83487", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the vulnerability is in Oracle Product Hub, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83487" }, { "rank": 725, "cve_id": "CVE-2026-87124", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle iRecruitment", "cwe": null, "title": "Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. While the vulnerability is in Oracle iRecruitment, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iRecruitment accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87124" }, { "rank": 726, "cve_id": "CVE-2026-87127", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Purchasing", "cwe": null, "title": "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the vulnerability is in Oracle Purchasing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Purchasing accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87127" }, { "rank": 727, "cve_id": "CVE-2026-87134", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Hyperion Data Relationship Management. While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87134" }, { "rank": 728, "cve_id": "CVE-2026-87141", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87141" }, { "rank": 729, "cve_id": "CVE-2026-87147", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87147" }, { "rank": 730, "cve_id": "CVE-2026-87151", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Bills of Material", "cwe": null, "title": "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. While the vulnerability is in Oracle Bills of Material, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Bills of Material accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87151" }, { "rank": 731, "cve_id": "CVE-2026-87183", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87183" }, { "rank": 732, "cve_id": "CVE-2026-87256", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87256" }, { "rank": 733, "cve_id": "CVE-2026-87257", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87257" }, { "rank": 734, "cve_id": "CVE-2026-87264", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87264" }, { "rank": 735, "cve_id": "CVE-2026-91930", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-266", "title": "Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91930" }, { "rank": 736, "cve_id": "CVE-2026-91947", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-362", "title": "FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91947" }, { "rank": 737, "cve_id": "CVE-2026-91948", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-191", "title": "FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91948" }, { "rank": 738, "cve_id": "CVE-2026-66372", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Digital Watchdog", "product": "VMAX A1 G4 DVR", "cwe": "CWE-337", "title": "Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66372" }, { "rank": 739, "cve_id": "CVE-2026-73943", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Identity Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Identity Manager accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73943" }, { "rank": 740, "cve_id": "CVE-2026-83052", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83052" }, { "rank": 741, "cve_id": "CVE-2026-83091", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Field Service", "cwe": null, "title": "Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Field Service accessible data as well as unauthorized update, insert or delete access to some of Oracle Field Service accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Field Service. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83091" }, { "rank": 742, "cve_id": "CVE-2026-83126", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Sales Online", "cwe": null, "title": "Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Sales Online, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Sales Online accessible data as well as unauthorized update, insert or delete access to some of Oracle Sales Online accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83126" }, { "rank": 743, "cve_id": "CVE-2026-83207", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Development", "cwe": null, "title": "Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Development as well as unauthorized update, insert or delete access to some of Siebel CRM Development accessible data and unauthorized read access to a subset of Siebel CRM Development accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83207" }, { "rank": 744, "cve_id": "CVE-2026-83320", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83320" }, { "rank": 745, "cve_id": "CVE-2026-87131", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87131" }, { "rank": 746, "cve_id": "CVE-2026-87132", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87132" }, { "rank": 747, "cve_id": "CVE-2026-87133", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87133" }, { "rank": 748, "cve_id": "CVE-2026-87137", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87137" }, { "rank": 749, "cve_id": "CVE-2026-87144", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87144" }, { "rank": 750, "cve_id": "CVE-2026-87233", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.6 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87233" }, { "rank": 751, "cve_id": "CVE-2026-87250", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87250" }, { "rank": 752, "cve_id": "CVE-2026-87258", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data as well as unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87258" }, { "rank": 753, "cve_id": "CVE-2026-91929", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-862", "title": "Flowise before 3.1.4 Cross-Tenant Authorization Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91929" }, { "rank": 754, "cve_id": "CVE-2026-91933", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-639", "title": "Flowise before 3.1.4 Authorization Bypass via openai-realtime", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91933" }, { "rank": 755, "cve_id": "CVE-2026-91938", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FlowiseAI", "product": "Flowise", "cwe": "CWE-918", "title": "Flowise before 3.1.4 Server-Side Request Forgery via document loaders", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91938" }, { "rank": 756, "cve_id": "CVE-2025-66974", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-20", "title": "An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service (DoS) or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-66974" }, { "rank": 757, "cve_id": "CVE-2026-11926", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Verify Identity Access", "cwe": "CWE-400", "title": "Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11926" }, { "rank": 758, "cve_id": "CVE-2026-11929", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Verify Identity Access", "cwe": "CWE-327", "title": "Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11929" }, { "rank": 759, "cve_id": "CVE-2026-12354", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "MQ", "cwe": "CWE-913", "title": "IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12354" }, { "rank": 760, "cve_id": "CVE-2026-12358", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Verify Identity Access", "cwe": "CWE-674", "title": "Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12358" }, { "rank": 761, "cve_id": "CVE-2026-18113", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-79", "title": "Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page Names", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18113" }, { "rank": 762, "cve_id": "CVE-2026-55149", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "vouch", "product": "vouch-proxy", "cwe": "CWE-789", "title": "Vouch Proxy: Unbounded Multipart Cookie Allocation DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55149" }, { "rank": 763, "cve_id": "CVE-2026-55178", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "geolens-io", "product": "geolens", "cwe": "CWE-200", "title": "GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55178" }, { "rank": 764, "cve_id": "CVE-2026-55690", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "StarCitizenWiki", "product": "mediawiki-extensions-EmbedVideo", "cwe": "CWE-79", "title": "EmbedVideo Extension: Stored XSS via unsanitized service name in exception text", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55690" }, { "rank": 765, "cve_id": "CVE-2026-55692", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "StarCitizenWiki", "product": "mediawiki-extensions-EmbedVideo", "cwe": "CWE-79", "title": "EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55692" }, { "rank": 766, "cve_id": "CVE-2026-58483", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ihor-sokoliuk", "product": "mcp-searxng", "cwe": "CWE-400", "title": "mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58483" }, { "rank": 767, "cve_id": "CVE-2026-61554", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jm33-m0", "product": "emp3r0r", "cwe": "CWE-400", "title": "emp3r0r has an unauthenticated HTTP Polling DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61554" }, { "rank": 768, "cve_id": "CVE-2026-69202", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-400", "title": "Http4s Ember HTTP/2: unbounded inbound body buffering", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69202" }, { "rank": 769, "cve_id": "CVE-2026-69203", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-400", "title": "Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69203" }, { "rank": 770, "cve_id": "CVE-2026-69208", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-400", "title": "Http4s: DigestAuth nonce map grows unbounded", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69208" }, { "rank": 771, "cve_id": "CVE-2026-69209", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-400", "title": "Http4s: WebSocket decoder accepts unbounded message sizes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69209" }, { "rank": 772, "cve_id": "CVE-2026-69210", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-835", "title": "Http4s: WebSocket decoder accepts negative length, causing infinite decode loop", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69210" }, { "rank": 773, "cve_id": "CVE-2026-69213", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-400", "title": "Http4s Ember HTTP/2: unbounded outbound frame queue", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69213" }, { "rank": 774, "cve_id": "CVE-2026-69218", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-770", "title": "Http4s Ember HTTP/2: unbounded continuation frame accumulation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69218" }, { "rank": 775, "cve_id": "CVE-2026-73960", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": "CWE-400", "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73960" }, { "rank": 776, "cve_id": "CVE-2026-76686", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76686" }, { "rank": 777, "cve_id": "CVE-2026-76687", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN Orchestrator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76687" }, { "rank": 778, "cve_id": "CVE-2026-76688", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76688" }, { "rank": 779, "cve_id": "CVE-2026-81238", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite", "cwe": "CWE-306", "title": "Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81238" }, { "rank": 780, "cve_id": "CVE-2026-81898", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-79", "title": "Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via country-less Address attribute in Express association views", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81898" }, { "rank": 781, "cve_id": "CVE-2026-83028", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83028" }, { "rank": 782, "cve_id": "CVE-2026-83034", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Sites", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83034" }, { "rank": 783, "cve_id": "CVE-2026-83051", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83051" }, { "rank": 784, "cve_id": "CVE-2026-83065", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle WebCenter Portal executes to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83065" }, { "rank": 785, "cve_id": "CVE-2026-83075", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "cwe": null, "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83075" }, { "rank": 786, "cve_id": "CVE-2026-83106", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in takeover of Oracle Forms. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83106" }, { "rank": 787, "cve_id": "CVE-2026-83110", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Marketing", "cwe": null, "title": "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83110" }, { "rank": 788, "cve_id": "CVE-2026-83114", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Quality", "cwe": null, "title": "Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful attacks of this vulnerability can result in takeover of Oracle Quality. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83114" }, { "rank": 789, "cve_id": "CVE-2026-83115", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Manager", "cwe": null, "title": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83115" }, { "rank": 790, "cve_id": "CVE-2026-83128", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Sales Offline", "cwe": null, "title": "Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Sales Offline. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Sales Offline accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83128" }, { "rank": 791, "cve_id": "CVE-2026-83133", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle iStore", "cwe": null, "title": "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83133" }, { "rank": 792, "cve_id": "CVE-2026-83156", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": null, "title": "Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having XDKC privilege with network access via Oracle Net to compromise Oracle XML Developers Kit. Successful attacks of this vulnerability can result in takeover of Oracle XML Developers Kit. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83156" }, { "rank": 793, "cve_id": "CVE-2026-83167", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Application Object Library", "cwe": null, "title": "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83167" }, { "rank": 794, "cve_id": "CVE-2026-83182", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Development", "cwe": null, "title": "Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Development. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83182" }, { "rank": 795, "cve_id": "CVE-2026-83183", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": "CWE-400", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83183" }, { "rank": 796, "cve_id": "CVE-2026-83204", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Sourcing", "cwe": null, "title": "Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful attacks of this vulnerability can result in takeover of Oracle Sourcing. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83204" }, { "rank": 797, "cve_id": "CVE-2026-83213", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM End User", "cwe": null, "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Reports). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM End User accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83213" }, { "rank": 798, "cve_id": "CVE-2026-83222", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": "CWE-400", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83222" }, { "rank": 799, "cve_id": "CVE-2026-83223", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Remote). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83223" }, { "rank": 800, "cve_id": "CVE-2026-83225", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": "CWE-400", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83225" }, { "rank": 801, "cve_id": "CVE-2026-83226", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83226" }, { "rank": 802, "cve_id": "CVE-2026-83227", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Integration", "cwe": null, "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in takeover of Siebel CRM Integration. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83227" }, { "rank": 803, "cve_id": "CVE-2026-83228", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": "CWE-400", "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83228" }, { "rank": 804, "cve_id": "CVE-2026-83235", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83235" }, { "rank": 805, "cve_id": "CVE-2026-83241", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83241" }, { "rank": 806, "cve_id": "CVE-2026-83257", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83257" }, { "rank": 807, "cve_id": "CVE-2026-83262", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Lifecycle Analytics", "cwe": null, "title": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Lifecycle Analytics. Successful attacks of this vulnerability can result in takeover of Oracle Product Lifecycle Analytics. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83262" }, { "rank": 808, "cve_id": "CVE-2026-83263", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Lifecycle Analytics", "cwe": null, "title": "Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Lifecycle Analytics. Successful attacks of this vulnerability can result in takeover of Oracle Product Lifecycle Analytics. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83263" }, { "rank": 809, "cve_id": "CVE-2026-83270", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83270" }, { "rank": 810, "cve_id": "CVE-2026-83276", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": "CWE-400", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83276" }, { "rank": 811, "cve_id": "CVE-2026-83280", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": "CWE-400", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83280" }, { "rank": 812, "cve_id": "CVE-2026-83281", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": "CWE-400", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83281" }, { "rank": 813, "cve_id": "CVE-2026-83289", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83289" }, { "rank": 814, "cve_id": "CVE-2026-83292", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83292" }, { "rank": 815, "cve_id": "CVE-2026-83295", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83295" }, { "rank": 816, "cve_id": "CVE-2026-83296", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83296" }, { "rank": 817, "cve_id": "CVE-2026-83318", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83318" }, { "rank": 818, "cve_id": "CVE-2026-83323", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83323" }, { "rank": 819, "cve_id": "CVE-2026-83326", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Integration", "cwe": null, "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83326" }, { "rank": 820, "cve_id": "CVE-2026-83330", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": "CWE-400", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83330" }, { "rank": 821, "cve_id": "CVE-2026-83333", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": "CWE-400", "title": "Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83333" }, { "rank": 822, "cve_id": "CVE-2026-83341", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Manager", "cwe": null, "title": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83341" }, { "rank": 823, "cve_id": "CVE-2026-83349", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": "CWE-400", "title": "Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83349" }, { "rank": 824, "cve_id": "CVE-2026-83350", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": "CWE-400", "title": "Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83350" }, { "rank": 825, "cve_id": "CVE-2026-83415", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Coherence", "cwe": null, "title": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83415" }, { "rank": 826, "cve_id": "CVE-2026-83424", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle JDeveloper", "cwe": null, "title": "Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle JDeveloper accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83424" }, { "rank": 827, "cve_id": "CVE-2026-83463", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Mobile Application Server", "cwe": null, "title": "Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Mobile Application Server executes to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Application Server. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83463" }, { "rank": 828, "cve_id": "CVE-2026-83489", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Banking Origination", "cwe": null, "title": "Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Onboarding Batch Processes). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Origination. Successful attacks of this vulnerability can result in takeover of Oracle Banking Origination. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83489" }, { "rank": 829, "cve_id": "CVE-2026-85234", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-125", "title": "Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85234" }, { "rank": 830, "cve_id": "CVE-2026-87136", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87136" }, { "rank": 831, "cve_id": "CVE-2026-87138", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": "CWE-400", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87138" }, { "rank": 832, "cve_id": "CVE-2026-87139", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87139" }, { "rank": 833, "cve_id": "CVE-2026-87140", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87140" }, { "rank": 834, "cve_id": "CVE-2026-87148", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": "CWE-400", "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87148" }, { "rank": 835, "cve_id": "CVE-2026-87190", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87190" }, { "rank": 836, "cve_id": "CVE-2026-87193", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87193" }, { "rank": 837, "cve_id": "CVE-2026-87194", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87194" }, { "rank": 838, "cve_id": "CVE-2026-87199", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-400", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87199" }, { "rank": 839, "cve_id": "CVE-2026-87203", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87203" }, { "rank": 840, "cve_id": "CVE-2026-87205", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87205" }, { "rank": 841, "cve_id": "CVE-2026-87211", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87211" }, { "rank": 842, "cve_id": "CVE-2026-87215", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-400", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87215" }, { "rank": 843, "cve_id": "CVE-2026-87221", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87221" }, { "rank": 844, "cve_id": "CVE-2026-87222", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": "CWE-400", "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87222" }, { "rank": 845, "cve_id": "CVE-2026-87237", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87237" }, { "rank": 846, "cve_id": "CVE-2026-87247", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87247" }, { "rank": 847, "cve_id": "CVE-2026-87254", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87254" }, { "rank": 848, "cve_id": "CVE-2026-87276", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87276" }, { "rank": 849, "cve_id": "CVE-2026-87277", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": "CWE-400", "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87277" }, { "rank": 850, "cve_id": "CVE-2026-87289", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": "CWE-400", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87289" }, { "rank": 851, "cve_id": "CVE-2026-88065", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NIAEFEUP", "product": "tts-be", "cwe": "CWE-200", "title": "`tts-be` application has a Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88065" }, { "rank": 852, "cve_id": "CVE-2026-88975", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-400", "title": "Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88975" }, { "rank": 853, "cve_id": "CVE-2026-18115", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "In Concrete CMS 9.2.0 to 9.5.2, Missing Authorization in REST API Users update() and change_password Enables Account Takeover.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18115" }, { "rank": 854, "cve_id": "CVE-2026-54547", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pipeboard-co", "product": "meta-ads-mcp", "cwe": "CWE-287", "title": "Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54547" }, { "rank": 855, "cve_id": "CVE-2026-83102", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Forms accessible data as well as unauthorized access to critical data or complete access to all Oracle Forms accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83102" }, { "rank": 856, "cve_id": "CVE-2026-83162", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Application Object Library", "cwe": null, "title": "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Application Object Library accessible data as well as unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83162" }, { "rank": 857, "cve_id": "CVE-2026-83184", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Application Object Library", "cwe": null, "title": "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Application Object Library accessible data as well as unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83184" }, { "rank": 858, "cve_id": "CVE-2026-83218", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83218" }, { "rank": 859, "cve_id": "CVE-2026-83334", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Web Services Manager", "cwe": null, "title": "Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Web Services Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Services Manager accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Web Services Manager. CVSS 3.1 Base Score 7.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83334" }, { "rank": 860, "cve_id": "CVE-2026-87130", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87130" }, { "rank": 861, "cve_id": "CVE-2026-87143", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87143" }, { "rank": 862, "cve_id": "CVE-2026-87195", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87195" }, { "rank": 863, "cve_id": "CVE-2026-87198", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87198" }, { "rank": 864, "cve_id": "CVE-2026-87206", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87206" }, { "rank": 865, "cve_id": "CVE-2026-87212", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87212" }, { "rank": 866, "cve_id": "CVE-2026-87213", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87213" }, { "rank": 867, "cve_id": "CVE-2026-87235", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSH to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87235" }, { "rank": 868, "cve_id": "CVE-2026-87242", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87242" }, { "rank": 869, "cve_id": "CVE-2026-91734", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-863", "title": "Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91734" }, { "rank": 870, "cve_id": "CVE-2026-73955", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 7.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73955" }, { "rank": 871, "cve_id": "CVE-2026-81899", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-79", "title": "Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboard", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81899" }, { "rank": 872, "cve_id": "CVE-2026-83155", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.3 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83155" }, { "rank": 873, "cve_id": "CVE-2026-83185", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Common Applications", "cwe": null, "title": "Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Common Applications accessible data as well as unauthorized access to critical data or complete access to all Oracle Common Applications accessible data. CVSS 3.1 Base Score 7.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83185" }, { "rank": 874, "cve_id": "CVE-2026-83190", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83190" }, { "rank": 875, "cve_id": "CVE-2026-83193", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel Apps - Life Sciences", "cwe": null, "title": "Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: Life Sciences). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Life Sciences executes to compromise Siebel Apps - Life Sciences. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Life Sciences. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83193" }, { "rank": 876, "cve_id": "CVE-2026-83242", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83242" }, { "rank": 877, "cve_id": "CVE-2026-83277", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM MCAD Connector", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. While the vulnerability is in Oracle Agile PLM MCAD Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM MCAD Connector accessible data as well as unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 7.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83277" }, { "rank": 878, "cve_id": "CVE-2026-85013", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-78", "title": "Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85013" }, { "rank": 879, "cve_id": "CVE-2026-87145", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data as well as unauthorized read access to a subset of Oracle Hyperion Data Relationship Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87145" }, { "rank": 880, "cve_id": "CVE-2026-87260", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile Engineering Data Management", "cwe": null, "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile Engineering Data Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 7.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87260" }, { "rank": 881, "cve_id": "CVE-2026-87261", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile Engineering Data Management", "cwe": null, "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. While the vulnerability is in Oracle Agile Engineering Data Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 7.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87261" }, { "rank": 882, "cve_id": "CVE-2026-11934", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Verify Identity Access", "cwe": "CWE-285", "title": "Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11934" }, { "rank": 883, "cve_id": "CVE-2026-54544", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ShaneIsrael", "product": "fireshare", "cwe": "CWE-918", "title": "Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54544" }, { "rank": 884, "cve_id": "CVE-2026-73966", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel Apps - Marketing", "cwe": null, "title": "Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attacks of this vulnerability can result in takeover of Siebel Apps - Marketing. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73966" }, { "rank": 885, "cve_id": "CVE-2026-76689", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76689" }, { "rank": 886, "cve_id": "CVE-2026-76690", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76690" }, { "rank": 887, "cve_id": "CVE-2026-76691", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76691" }, { "rank": 888, "cve_id": "CVE-2026-76853", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR268", "cwe": "CWE-353", "title": "Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76853" }, { "rank": 889, "cve_id": "CVE-2026-83004", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Enterprise Capture", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle WebCenter Enterprise Capture executes to compromise Oracle WebCenter Enterprise Capture. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Enterprise Capture accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Enterprise Capture accessible data. CVSS 3.1 Base Score 7.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83004" }, { "rank": 890, "cve_id": "CVE-2026-83016", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83016" }, { "rank": 891, "cve_id": "CVE-2026-83063", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Internet Directory", "cwe": null, "title": "Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83063" }, { "rank": 892, "cve_id": "CVE-2026-83082", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Marketing", "cwe": null, "title": "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83082" }, { "rank": 893, "cve_id": "CVE-2026-83112", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Lease and Finance Management", "cwe": null, "title": "Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Lease and Finance Management. Successful attacks of this vulnerability can result in takeover of Oracle Lease and Finance Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83112" }, { "rank": 894, "cve_id": "CVE-2026-83117", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Applications DBA", "cwe": null, "title": "Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Applications DBA. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83117" }, { "rank": 895, "cve_id": "CVE-2026-83176", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Common Applications", "cwe": null, "title": "Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks of this vulnerability can result in takeover of Oracle Common Applications. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83176" }, { "rank": 896, "cve_id": "CVE-2026-83188", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Depot Repair", "cwe": null, "title": "Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in takeover of Oracle Depot Repair. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83188" }, { "rank": 897, "cve_id": "CVE-2026-83195", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via TCP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in takeover of Siebel CRM Deployment. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83195" }, { "rank": 898, "cve_id": "CVE-2026-83273", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83273" }, { "rank": 899, "cve_id": "CVE-2026-83298", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle BI Publisher", "cwe": null, "title": "Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in takeover of Oracle BI Publisher. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83298" }, { "rank": 900, "cve_id": "CVE-2026-83322", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83322" }, { "rank": 901, "cve_id": "CVE-2026-83325", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83325" }, { "rank": 902, "cve_id": "CVE-2026-83328", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Framework", "cwe": null, "title": "Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in takeover of Oracle Applications Framework. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83328" }, { "rank": 903, "cve_id": "CVE-2026-83344", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Identity Manager Connector", "cwe": null, "title": "Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Database Application Table). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83344" }, { "rank": 904, "cve_id": "CVE-2026-83440", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83440" }, { "rank": 905, "cve_id": "CVE-2026-83442", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83442" }, { "rank": 906, "cve_id": "CVE-2026-83453", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Document Management and Collaboration", "cwe": null, "title": "Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83453" }, { "rank": 907, "cve_id": "CVE-2026-83481", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Contracts", "cwe": null, "title": "Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successful attacks of this vulnerability can result in takeover of Oracle Contracts. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83481" }, { "rank": 908, "cve_id": "CVE-2026-83482", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Contracts", "cwe": null, "title": "Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successful attacks of this vulnerability can result in takeover of Oracle Contracts. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83482" }, { "rank": 909, "cve_id": "CVE-2026-87207", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87207" }, { "rank": 910, "cve_id": "CVE-2026-87239", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87239" }, { "rank": 911, "cve_id": "CVE-2026-87244", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87244" }, { "rank": 912, "cve_id": "CVE-2026-87246", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87246" }, { "rank": 913, "cve_id": "CVE-2026-90650", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jetmonsters", "product": "MotoPress Hotel Booking", "cwe": "CWE-79", "title": "MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90650" }, { "rank": 914, "cve_id": "CVE-2026-10144", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "web-infra-dev", "product": "rsbuild", "cwe": "CWE-78", "title": "Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10144" }, { "rank": 915, "cve_id": "CVE-2026-12667", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "MQ", "cwe": "CWE-611", "title": "IBM MQ .NET client is vulnerable to XML external entity injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12667" }, { "rank": 916, "cve_id": "CVE-2026-12752", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Business Automation Workflow containers and traditional", "cwe": "CWE-611", "title": "Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12752" }, { "rank": 917, "cve_id": "CVE-2026-19655", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-20", "title": "On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthent", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19655" }, { "rank": 918, "cve_id": "CVE-2026-19774", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "BlueZ", "product": "BlueZ", "cwe": "CWE-121", "title": "BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19774" }, { "rank": 919, "cve_id": "CVE-2026-21586", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Atlassian", "product": "Confluence Data Center", "cwe": "CWE-285", "title": "This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resources or functionality, possibly providing attackers with sensitive information or even execute arbitrary code. Atlassian recommends that Confluence Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Confluence Data Center 9.2: Upgrade to a release greater than or equal to 9.2.24 Confluence Data Center 10.2: Upgrade to a release greater than or equal to 10.2.17 See the release notes ([https://confluence.atlassian.com/doc/confluence-release-notes-327.html]). You can download the latest version of Confluence Data Center from the download center ([https://www.atlassian.com/software/confluence/download-archives]). This vulnerability was reported via our Penetration Testing program.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-21586" }, { "rank": 920, "cve_id": "CVE-2026-21587", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Atlassian", "product": "Jira Service Management Data Center", "cwe": "CWE-285", "title": "This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resources or functionality, possibly providing attackers with sensitive information or even execute arbitrary code. Atlassian recommends that Jira Service Management Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: * Jira Service Management Data Center 11.3: Upgrade to a release greater than or equal to 11.3.11 See the release notes (https://confluence.atlassian.com/servicemanagement/jira-service-management-release-notes-780083086.html). You can download the latest version of Jira Service Management Data Center from the download center (https://www.atlassian.com/software/jira/service-management/download-archives). This vulnerability was reported via our Penetration Testing program.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-21587" }, { "rank": 921, "cve_id": "CVE-2026-21588", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Atlassian", "product": "Confluence Data Center", "cwe": "CWE-400", "title": "This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely disrupting services of a host connected to a network. Atlassian recommends that Confluence Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Confluence Data Center 9.2: Upgrade to a release greater than or equal to 9.2.24 Confluence Data Center 10.2: Upgrade to a release greater than or equal to 10.2.17 See the release notes ([https://confluence.atlassian.com/doc/confluence-release-notes-327.html]). You can download the latest version of Confluence Data Center from the download center ([https://www.atlassian.com/software/confluence/download-archives]). This vulnerability was reported via our Penetration Testing program.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-21588" }, { "rank": 922, "cve_id": "CVE-2026-53966", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "xwiki", "product": "xwiki-platform", "cwe": "CWE-862", "title": "XWiki Platform: Privilege escalation from edit to script right through Live Data editing", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53966" }, { "rank": 923, "cve_id": "CVE-2026-54077", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ArcadeData", "product": "arcadedb", "cwe": "CWE-22", "title": "ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54077" }, { "rank": 924, "cve_id": "CVE-2026-58200", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jhb-software", "product": "payload-plugins", "cwe": "CWE-347", "title": "@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58200" }, { "rank": 925, "cve_id": "CVE-2026-58485", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ihor-sokoliuk", "product": "mcp-searxng", "cwe": "CWE-918", "title": "mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58485" }, { "rank": 926, "cve_id": "CVE-2026-58502", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "gouef", "product": "githubtoplanguages", "cwe": "CWE-78", "title": "githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58502" }, { "rank": 927, "cve_id": "CVE-2026-59965", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jhb-software", "product": "payload-plugins", "cwe": "CWE-863", "title": "@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59965" }, { "rank": 928, "cve_id": "CVE-2026-68953", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Digital Watchdog", "product": "VMAX A1 G4 DVR", "cwe": "CWE-306", "title": "Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68953" }, { "rank": 929, "cve_id": "CVE-2026-76692", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": "CWE-200", "title": "Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76692" }, { "rank": 930, "cve_id": "CVE-2026-76821", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenCTI-Platform", "product": "opencti", "cwe": "CWE-400", "title": "OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76821" }, { "rank": 931, "cve_id": "CVE-2026-76854", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-522", "title": "Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76854" }, { "rank": 932, "cve_id": "CVE-2026-76855", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-359", "title": "Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76855" }, { "rank": 933, "cve_id": "CVE-2026-76857", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-522", "title": "Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76857" }, { "rank": 934, "cve_id": "CVE-2026-76859", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-522", "title": "Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76859" }, { "rank": 935, "cve_id": "CVE-2026-76870", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-125", "title": "Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76870" }, { "rank": 936, "cve_id": "CVE-2026-76871", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-522", "title": "Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76871" }, { "rank": 937, "cve_id": "CVE-2026-78081", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "j2commerce.com", "product": "J2Store extension for Joomla", "cwe": "CWE-352", "title": "Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78081" }, { "rank": 938, "cve_id": "CVE-2026-83044", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle XML Gateway", "cwe": null, "title": "Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle XML Gateway accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle XML Gateway. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83044" }, { "rank": 939, "cve_id": "CVE-2026-83046", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Portal. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83046" }, { "rank": 940, "cve_id": "CVE-2026-83050", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle WebCenter Portal", "cwe": null, "title": "Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83050" }, { "rank": 941, "cve_id": "CVE-2026-83080", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Banking Branch", "cwe": null, "title": "Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Branch. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Banking Branch. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83080" }, { "rank": 942, "cve_id": "CVE-2026-83092", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Field Service", "cwe": null, "title": "Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Field Service accessible data as well as unauthorized access to critical data or complete access to all Oracle Field Service accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Field Service. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83092" }, { "rank": 943, "cve_id": "CVE-2026-83111", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Partner Management", "cwe": null, "title": "Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner Management. While the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Partner Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83111" }, { "rank": 944, "cve_id": "CVE-2026-83113", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Quality", "cwe": null, "title": "Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Quality accessible data as well as unauthorized update, insert or delete access to some of Oracle Quality accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83113" }, { "rank": 945, "cve_id": "CVE-2026-83123", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Report Manager", "cwe": null, "title": "Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Report Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Report Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Report Manager. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83123" }, { "rank": 946, "cve_id": "CVE-2026-83130", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Site Hub", "cwe": null, "title": "Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Site Hub accessible data as well as unauthorized read access to a subset of Oracle Site Hub accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83130" }, { "rank": 947, "cve_id": "CVE-2026-83158", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Manager", "cwe": null, "title": "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Applications Manager executes to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83158" }, { "rank": 948, "cve_id": "CVE-2026-83161", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Project Intelligence", "cwe": null, "title": "Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Intelligence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Project Intelligence accessible data as well as unauthorized read access to a subset of Oracle Project Intelligence accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83161" }, { "rank": 949, "cve_id": "CVE-2026-83171", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle One-to-One Fulfillment", "cwe": null, "title": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. While the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle One-to-One Fulfillment. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83171" }, { "rank": 950, "cve_id": "CVE-2026-83173", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle One-to-One Fulfillment", "cwe": null, "title": "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle One-to-One Fulfillment. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83173" }, { "rank": 951, "cve_id": "CVE-2026-83179", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Common Applications Calendar", "cwe": null, "title": "Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Common Applications Calendar accessible data as well as unauthorized access to critical data or complete access to all Oracle Common Applications Calendar accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Common Applications Calendar. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83179" }, { "rank": 952, "cve_id": "CVE-2026-83186", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Common Applications Calendar", "cwe": null, "title": "Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Common Applications Calendar accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Common Applications Calendar. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83186" }, { "rank": 953, "cve_id": "CVE-2026-83187", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Common Applications Calendar", "cwe": null, "title": "Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Common Applications Calendar accessible data as well as unauthorized read access to a subset of Oracle Common Applications Calendar accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83187" }, { "rank": 954, "cve_id": "CVE-2026-83206", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Banking Corporate Lending Process Management", "cwe": null, "title": "Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications (component: Base). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Corporate Lending Process Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Banking Corporate Lending Process Management. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83206" }, { "rank": 955, "cve_id": "CVE-2026-83217", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM End User", "cwe": null, "title": "Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM End User accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM End User accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83217" }, { "rank": 956, "cve_id": "CVE-2026-83219", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83219" }, { "rank": 957, "cve_id": "CVE-2026-83221", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Integration", "cwe": null, "title": "Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Siebel CRM Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Integration accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Integration accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83221" }, { "rank": 958, "cve_id": "CVE-2026-83224", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Siebel CRM Deployment. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83224" }, { "rank": 959, "cve_id": "CVE-2026-83230", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data as well as unauthorized update, insert or delete access to some of Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83230" }, { "rank": 960, "cve_id": "CVE-2026-83237", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83237" }, { "rank": 961, "cve_id": "CVE-2026-83238", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83238" }, { "rank": 962, "cve_id": "CVE-2026-83240", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83240" }, { "rank": 963, "cve_id": "CVE-2026-83244", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83244" }, { "rank": 964, "cve_id": "CVE-2026-83259", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83259" }, { "rank": 965, "cve_id": "CVE-2026-83300", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle XML Gateway", "cwe": null, "title": "Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle XML Gateway accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle XML Gateway. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83300" }, { "rank": 966, "cve_id": "CVE-2026-83324", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83324" }, { "rank": 967, "cve_id": "CVE-2026-83332", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Applications Framework", "cwe": null, "title": "Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Framework accessible data as well as unauthorized update, insert or delete access to some of Oracle Applications Framework accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83332" }, { "rank": 968, "cve_id": "CVE-2026-83345", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle XML Gateway", "cwe": null, "title": "Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle XML Gateway accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle XML Gateway. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83345" }, { "rank": 969, "cve_id": "CVE-2026-83352", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle XML Gateway", "cwe": null, "title": "Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle XML Gateway. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle XML Gateway accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle XML Gateway. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83352" }, { "rank": 970, "cve_id": "CVE-2026-83417", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Communications Cloud Native Core Security Edge Protection Proxy", "cwe": null, "title": "Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Communications Cloud Native Core Security Edge Protection Proxy executes to compromise Oracle Communications Cloud Native Core Security Edge Protection Proxy. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Cloud Native Core Security Edge Protection Proxy accessible data as well as unauthorized update, insert or delete access to some of Oracle Communications Cloud Native Core Security Edge Protection Proxy accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83417" }, { "rank": 971, "cve_id": "CVE-2026-83436", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Depot Repair", "cwe": null, "title": "Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Depot Repair accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Depot Repair. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83436" }, { "rank": 972, "cve_id": "CVE-2026-83484", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle US Federal Human Resources", "cwe": null, "title": "Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle US Federal Human Resources. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle US Federal Human Resources accessible data as well as unauthorized read access to a subset of Oracle US Federal Human Resources accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83484" }, { "rank": 973, "cve_id": "CVE-2026-87126", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Report Manager", "cwe": null, "title": "Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Reports Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Report Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Report Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Report Manager. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87126" }, { "rank": 974, "cve_id": "CVE-2026-87135", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87135" }, { "rank": 975, "cve_id": "CVE-2026-87142", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Data Relationship Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87142" }, { "rank": 976, "cve_id": "CVE-2026-87146", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Data Relationship Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87146" }, { "rank": 977, "cve_id": "CVE-2026-87149", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Contract Lifecycle Management for Public Sector", "cwe": null, "title": "Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contract Lifecycle Management for Public Sector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Contract Lifecycle Management for Public Sector accessible data as well as unauthorized update, insert or delete access to some of Oracle Contract Lifecycle Management for Public Sector accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87149" }, { "rank": 978, "cve_id": "CVE-2026-87156", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Product Hub accessible data as well as unauthorized update, insert or delete access to some of Oracle Product Hub accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87156" }, { "rank": 979, "cve_id": "CVE-2026-87158", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Order Management", "cwe": null, "title": "Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Enterprise Command Center). The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Order Management accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87158" }, { "rank": 980, "cve_id": "CVE-2026-87160", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle HRMS (India)", "cwe": null, "title": "Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS (India). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HRMS (India) accessible data as well as unauthorized update, insert or delete access to some of Oracle HRMS (India) accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87160" }, { "rank": 981, "cve_id": "CVE-2026-87191", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87191" }, { "rank": 982, "cve_id": "CVE-2026-87192", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87192" }, { "rank": 983, "cve_id": "CVE-2026-87208", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87208" }, { "rank": 984, "cve_id": "CVE-2026-87209", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87209" }, { "rank": 985, "cve_id": "CVE-2026-87220", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87220" }, { "rank": 986, "cve_id": "CVE-2026-87225", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87225" }, { "rank": 987, "cve_id": "CVE-2026-87236", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87236" }, { "rank": 988, "cve_id": "CVE-2026-87249", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87249" }, { "rank": 989, "cve_id": "CVE-2026-87262", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile Engineering Data Management", "cwe": null, "title": "Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87262" }, { "rank": 990, "cve_id": "CVE-2026-91945", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-125", "title": "FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATR", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91945" }, { "rank": 991, "cve_id": "CVE-2026-91946", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-908", "title": "FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91946" }, { "rank": 992, "cve_id": "CVE-2026-91950", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-125", "title": "FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91950" }, { "rank": 993, "cve_id": "CVE-2026-91951", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-617", "title": "FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrc", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91951" }, { "rank": 994, "cve_id": "CVE-2026-91952", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-835", "title": "FreeRDP before 3.31.0 Denial of Service via pool_decode_rect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91952" }, { "rank": 995, "cve_id": "CVE-2026-91953", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-120", "title": "FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFO", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91953" }, { "rank": 996, "cve_id": "CVE-2026-91954", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-476", "title": "FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91954" }, { "rank": 997, "cve_id": "CVE-2026-91956", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-125", "title": "FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91956" }, { "rank": 998, "cve_id": "CVE-2026-91959", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-125", "title": "FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91959" }, { "rank": 999, "cve_id": "CVE-2026-91960", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-190", "title": "FreeRDP before 3.31.0 Integer Overflow Double Free", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91960" }, { "rank": 1000, "cve_id": "CVE-2026-91961", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-617", "title": "FreeRDP before 3.31.0 Denial of Service via URBDRC", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91961" }, { "rank": 1001, "cve_id": "CVE-2026-91963", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-457", "title": "FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91963" }, { "rank": 1002, "cve_id": "CVE-2026-91968", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-674", "title": "vikunja before 2.6.0 Denial of Service via unbounded filter recursion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91968" }, { "rank": 1003, "cve_id": "CVE-2026-91969", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-400", "title": "vikunja before 2.6.0 Resource Exhaustion via CSV Migration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91969" }, { "rank": 1004, "cve_id": "CVE-2026-91970", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-770", "title": "Vikunja before 2.6.0 Resource Exhaustion via Planka Migration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91970" }, { "rank": 1005, "cve_id": "CVE-2026-91971", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-400", "title": "Vikunja before 2.6.0 Denial of Service via Avatar Upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91971" }, { "rank": 1006, "cve_id": "CVE-2026-91979", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-400", "title": "Vikunja before 2.6.0 Denial of Service via Decompression Bomb", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91979" }, { "rank": 1007, "cve_id": "CVE-2026-91987", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dep0we", "product": "atomic-agents-stack", "cwe": "CWE-770", "title": "atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Model", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91987" }, { "rank": 1008, "cve_id": "CVE-2026-91994", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "semaphoreui", "product": "semaphore", "cwe": "CWE-862", "title": "Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91994" }, { "rank": 1009, "cve_id": "CVE-2026-92256", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-522", "title": "Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92256" }, { "rank": 1010, "cve_id": "CVE-2026-12150", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "MQ", "cwe": "CWE-121", "title": "IBM MQ queue manager is vulnerable to denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12150" }, { "rank": 1011, "cve_id": "CVE-2026-58701", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58701" }, { "rank": 1012, "cve_id": "CVE-2026-58724", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58724" }, { "rank": 1013, "cve_id": "CVE-2026-58728", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58728" }, { "rank": 1014, "cve_id": "CVE-2026-58734", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58734" }, { "rank": 1015, "cve_id": "CVE-2026-73446", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-696", "title": "Security Advisory 0160", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73446" }, { "rank": 1016, "cve_id": "CVE-2026-73459", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-354", "title": "Security Advisory 0160", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73459" }, { "rank": 1017, "cve_id": "CVE-2026-73460", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-863", "title": "Security Advisory 0160", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73460" }, { "rank": 1018, "cve_id": "CVE-2026-76693", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": "CWE-400", "title": "Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76693" }, { "rank": 1019, "cve_id": "CVE-2026-76856", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-352", "title": "Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76856" }, { "rank": 1020, "cve_id": "CVE-2026-83015", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "PeopleSoft Enterprise PeopleTools", "cwe": null, "title": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83015" }, { "rank": 1021, "cve_id": "CVE-2026-83150", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Application Testing Suite", "cwe": null, "title": "Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Application Testing Suite executes to compromise Oracle Application Testing Suite. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83150" }, { "rank": 1022, "cve_id": "CVE-2026-83231", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": null, "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-dbclient-mongodb). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Helidon accessible data as well as unauthorized update, insert or delete access to some of Helidon accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83231" }, { "rank": 1023, "cve_id": "CVE-2026-83239", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83239" }, { "rank": 1024, "cve_id": "CVE-2026-83252", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83252" }, { "rank": 1025, "cve_id": "CVE-2026-83316", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Business Intelligence Enterprise Edition", "cwe": null, "title": "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83316" }, { "rank": 1026, "cve_id": "CVE-2026-83368", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM", "cwe": null, "title": "Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM accessible data as well as unauthorized update, insert or delete access to some of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83368" }, { "rank": 1027, "cve_id": "CVE-2026-87240", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87240" }, { "rank": 1028, "cve_id": "CVE-2026-19641", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-116", "title": "On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources, resulting in legit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19641" }, { "rank": 1029, "cve_id": "CVE-2026-47780", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "free5gc", "product": "free5gc", "cwe": "CWE-20", "title": "free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistence", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47780" }, { "rank": 1030, "cve_id": "CVE-2026-53941", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "inspektor-gadget", "product": "inspektor-gadget", "cwe": "CWE-770", "title": "Inspektor Gadget Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53941" }, { "rank": 1031, "cve_id": "CVE-2026-55617", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "hydro-dev", "product": "Hydro", "cwe": "CWE-613", "title": "Hydro: Insufficient session expiration when recreating sessions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55617" }, { "rank": 1032, "cve_id": "CVE-2026-55701", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "open-telemetry", "product": "opentelemetry-collector-contrib", "cwe": "CWE-863", "title": "OpenTelemetry githubreceiver silently ignores configured required_headers authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55701" }, { "rank": 1033, "cve_id": "CVE-2026-57442", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "bitbonsai", "product": "mcpvault", "cwe": "CWE-22", "title": "MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57442" }, { "rank": 1034, "cve_id": "CVE-2026-76865", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-476", "title": "Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76865" }, { "rank": 1035, "cve_id": "CVE-2026-76868", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-476", "title": "Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76868" }, { "rank": 1036, "cve_id": "CVE-2026-89027", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "miniOrange", "product": "JWT Authentication for WP REST APIs", "cwe": "CWE-306", "title": "miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89027" }, { "rank": 1037, "cve_id": "CVE-2026-90439", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Plus", "cwe": "CWE-122", "title": "NGINX ngx_http_v3_module vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90439" }, { "rank": 1038, "cve_id": "CVE-2026-91958", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-125", "title": "FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91958" }, { "rank": 1039, "cve_id": "CVE-2026-91966", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WWBN", "product": "AVideo", "cwe": "CWE-918", "title": "AVideo through 29.0 Unauthenticated SSRF via Host Header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91966" }, { "rank": 1040, "cve_id": "CVE-2026-91997", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "evolution-foundation", "product": "evolution-api", "cwe": "CWE-697", "title": "evolution-api through 2.3.7 Prometheus Metrics IP Allowlist Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91997" }, { "rank": 1041, "cve_id": "CVE-2026-92003", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "MISP", "product": "MISP", "cwe": "CWE-400", "title": "MISP Unthrottled Authentication Failure Log Writes Enable Resource Exhaustion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92003" }, { "rank": 1042, "cve_id": "CVE-2026-92114", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "a2ui-project", "product": "a2ui", "cwe": "CWE-400", "title": "a2ui-project a2ui Basic Catalog safe_regex.ts redos", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92114" }, { "rank": 1043, "cve_id": "CVE-2026-55770", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "openbao", "product": "openbao", "cwe": "CWE-90", "title": "OpenBao: LDAPi ldaputil (wrong escape func)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55770" }, { "rank": 1044, "cve_id": "CVE-2026-69214", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-384", "title": "Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69214" }, { "rank": 1045, "cve_id": "CVE-2026-69215", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-565", "title": "Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69215" }, { "rank": 1046, "cve_id": "CVE-2026-73965", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Deployment", "cwe": null, "title": "Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to critical data or complete access to all Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73965" }, { "rank": 1047, "cve_id": "CVE-2026-83076", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle HR Intelligence", "cwe": null, "title": "Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HR Intelligence accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle HR Intelligence. CVSS 3.1 Base Score 6.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83076" }, { "rank": 1048, "cve_id": "CVE-2026-83278", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": null, "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-neo4j). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Helidon executes to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83278" }, { "rank": 1049, "cve_id": "CVE-2026-83441", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Hub", "cwe": null, "title": "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Hub accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83441" }, { "rank": 1050, "cve_id": "CVE-2026-83491", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle iRecruitment", "cwe": null, "title": "Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle iRecruitment executes to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iRecruitment accessible data as well as unauthorized access to critical data or complete access to all Oracle iRecruitment accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83491" }, { "rank": 1051, "cve_id": "CVE-2026-87252", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM executes to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM accessible data as well as unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87252" }, { "rank": 1052, "cve_id": "CVE-2026-55317", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55317" }, { "rank": 1053, "cve_id": "CVE-2026-55332", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55332" }, { "rank": 1054, "cve_id": "CVE-2026-55365", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55365" }, { "rank": 1055, "cve_id": "CVE-2026-56879", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-441", "title": "In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56879" }, { "rank": 1056, "cve_id": "CVE-2026-56922", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-441", "title": "In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56922" }, { "rank": 1057, "cve_id": "CVE-2026-56972", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56972" }, { "rank": 1058, "cve_id": "CVE-2026-56989", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56989" }, { "rank": 1059, "cve_id": "CVE-2026-56992", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-441", "title": "In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56992" }, { "rank": 1060, "cve_id": "CVE-2026-57035", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57035" }, { "rank": 1061, "cve_id": "CVE-2026-58698", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-441", "title": "In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58698" }, { "rank": 1062, "cve_id": "CVE-2026-58716", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58716" }, { "rank": 1063, "cve_id": "CVE-2026-58718", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58718" }, { "rank": 1064, "cve_id": "CVE-2026-58726", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-693", "title": "In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58726" }, { "rank": 1065, "cve_id": "CVE-2026-58739", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-441", "title": "In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58739" }, { "rank": 1066, "cve_id": "CVE-2026-58747", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-693", "title": "In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58747" }, { "rank": 1067, "cve_id": "CVE-2026-58751", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-416", "title": "In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58751" }, { "rank": 1068, "cve_id": "CVE-2026-58755", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-693", "title": "In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58755" }, { "rank": 1069, "cve_id": "CVE-2026-58765", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-693", "title": "In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58765" }, { "rank": 1070, "cve_id": "CVE-2026-58767", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-693", "title": "In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58767" }, { "rank": 1071, "cve_id": "CVE-2026-58773", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-787", "title": "In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58773" }, { "rank": 1072, "cve_id": "CVE-2026-87248", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Hyperion Financial Management", "cwe": null, "title": "Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87248" }, { "rank": 1073, "cve_id": "CVE-2026-88922", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "HashiCorp", "product": "Shared library", "cwe": "CWE-281", "title": "Go-getter vulnerable to a privilege escalation issue in its archive decompression handling", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88922" }, { "rank": 1074, "cve_id": "CVE-2026-76694", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": "CWE-269", "title": "Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76694" }, { "rank": 1075, "cve_id": "CVE-2026-1759", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Secomea", "product": "GateManager", "cwe": "CWE-280", "title": "Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above", "url": "https://www.cve.org/CVERecord?id=CVE-2026-1759" }, { "rank": 1076, "cve_id": "CVE-2026-11864", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Cloud Pak for Business Automation", "cwe": "CWE-643", "title": "Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11864" }, { "rank": 1077, "cve_id": "CVE-2026-48987", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pyload", "product": "pyload", "cwe": "CWE-400", "title": "pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48987" }, { "rank": 1078, "cve_id": "CVE-2026-54050", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sakaiproject", "product": "sakai", "cwe": "CWE-639", "title": "Sakai: IDOR in Profile Image Deletion Allows Any Authenticated User to Delete Any User's Profile Image", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54050" }, { "rank": 1079, "cve_id": "CVE-2026-54168", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "tektoncd", "product": "pipelines-as-code", "cwe": "CWE-269", "title": "Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54168" }, { "rank": 1080, "cve_id": "CVE-2026-54688", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ihor-sokoliuk", "product": "mcp-searxng", "cwe": "CWE-918", "title": "mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54688" }, { "rank": 1081, "cve_id": "CVE-2026-55306", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55306" }, { "rank": 1082, "cve_id": "CVE-2026-55776", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "openbao", "product": "openbao", "cwe": "CWE-617", "title": "OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55776" }, { "rank": 1083, "cve_id": "CVE-2026-56830", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "shopperlabs", "product": "shopper", "cwe": "CWE-862", "title": "Shopper: Incomplete fix for GHSA-h4mp-g9c6-xwph: Media sub-form store() still lacks authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56830" }, { "rank": 1084, "cve_id": "CVE-2026-56831", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "shopperlabs", "product": "shopper", "cwe": "CWE-20", "title": "Shopper: Negative discount values accepted and propagated through order calculation pipeline", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56831" }, { "rank": 1085, "cve_id": "CVE-2026-57008", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57008" }, { "rank": 1086, "cve_id": "CVE-2026-59157", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ncarlier", "product": "webhookd", "cwe": "CWE-290", "title": "webhookd: Unrestricted HTTP Header to Shell Variable Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59157" }, { "rank": 1087, "cve_id": "CVE-2026-62597", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Enterprise Manager Base Platform", "cwe": null, "title": "Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62597" }, { "rank": 1088, "cve_id": "CVE-2026-70755", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Web Applications Desktop Integrator", "cwe": null, "title": "Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Applications Desktop Integrator accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70755" }, { "rank": 1089, "cve_id": "CVE-2026-73437", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-345", "title": "On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper/destinat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73437" }, { "rank": 1090, "cve_id": "CVE-2026-76695", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": "CWE-120", "title": "Unauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76695" }, { "rank": 1091, "cve_id": "CVE-2026-76696", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": "CWE-400", "title": "Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76696" }, { "rank": 1092, "cve_id": "CVE-2026-76697", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": "CWE-200", "title": "Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76697" }, { "rank": 1093, "cve_id": "CVE-2026-76698", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76698" }, { "rank": 1094, "cve_id": "CVE-2026-79409", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-639", "title": "An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and the downloadable fulfilment components.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79409" }, { "rank": 1095, "cve_id": "CVE-2026-81237", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite", "cwe": "CWE-287", "title": "Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81237" }, { "rank": 1096, "cve_id": "CVE-2026-83097", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Forms accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Forms. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83097" }, { "rank": 1097, "cve_id": "CVE-2026-83140", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Field Service", "cwe": null, "title": "Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Field Service accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83140" }, { "rank": 1098, "cve_id": "CVE-2026-83175", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Application Object Library", "cwe": null, "title": "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83175" }, { "rank": 1099, "cve_id": "CVE-2026-83200", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Process Manufacturing Intelligence", "cwe": null, "title": "Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Process Manufacturing Intelligence. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Process Manufacturing Intelligence accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83200" }, { "rank": 1100, "cve_id": "CVE-2026-83250", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83250" }, { "rank": 1101, "cve_id": "CVE-2026-83251", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Commerce Guided Search / Oracle Commerce Experience Manager", "cwe": null, "title": "Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager and unauthorized read access to a subset of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83251" }, { "rank": 1102, "cve_id": "CVE-2026-83347", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Database Server", "cwe": null, "title": "Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle Net Services. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83347" }, { "rank": 1103, "cve_id": "CVE-2026-83433", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Depot Repair", "cwe": null, "title": "Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Depot Repair accessible data as well as unauthorized access to critical data or complete access to all Oracle Depot Repair accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83433" }, { "rank": 1104, "cve_id": "CVE-2026-83443", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Assets", "cwe": null, "title": "Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Assets accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83443" }, { "rank": 1105, "cve_id": "CVE-2026-83460", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": null, "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83460" }, { "rank": 1106, "cve_id": "CVE-2026-88618", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-79", "title": "1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88618" }, { "rank": 1107, "cve_id": "CVE-2026-12749", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Cloud Pak for Business Automation", "cwe": "CWE-79", "title": "Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12749" }, { "rank": 1108, "cve_id": "CVE-2026-12750", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Cloud Pak for Business Automation", "cwe": "CWE-79", "title": "Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12750" }, { "rank": 1109, "cve_id": "CVE-2026-15609", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "QODE", "product": "Bridge - Creative Multipurpose WordPress Theme", "cwe": "CWE-79", "title": "Bridge - Creative Multipurpose WordPress Theme <= 30.8.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15609" }, { "rank": 1110, "cve_id": "CVE-2026-56915", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56915" }, { "rank": 1111, "cve_id": "CVE-2026-56923", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56923" }, { "rank": 1112, "cve_id": "CVE-2026-56964", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56964" }, { "rank": 1113, "cve_id": "CVE-2026-56988", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-362", "title": "In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56988" }, { "rank": 1114, "cve_id": "CVE-2026-76699", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76699" }, { "rank": 1115, "cve_id": "CVE-2026-83077", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Siebel CRM Cloud Applications", "cwe": null, "title": "Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Siebel CRM Cloud Applications accessible data as well as unauthorized read access to a subset of Siebel CRM Cloud Applications accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83077" }, { "rank": 1116, "cve_id": "CVE-2024-58384", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "tornadoweb", "product": "tornado", "cwe": "CWE-113", "title": "Tornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClient", "url": "https://www.cve.org/CVERecord?id=CVE-2024-58384" }, { "rank": 1117, "cve_id": "CVE-2026-53658", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "hyperledger", "product": "fabric-ca", "cwe": "CWE-90", "title": "Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53658" }, { "rank": 1118, "cve_id": "CVE-2026-54689", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ihor-sokoliuk", "product": "mcp-searxng", "cwe": "CWE-200", "title": "mcp-searxng hardened-mode SSRF bypasses permit internal URL access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54689" }, { "rank": 1119, "cve_id": "CVE-2026-73451", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-1419", "title": "On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73451" }, { "rank": 1120, "cve_id": "CVE-2026-82190", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "j2commerce.com", "product": "J2Store extension for Joomla", "cwe": "CWE-1241", "title": "Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82190" }, { "rank": 1121, "cve_id": "CVE-2026-83354", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Coherence", "cwe": null, "title": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Coherence accessible data. CVSS 3.1 Base Score 6.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83354" }, { "rank": 1122, "cve_id": "CVE-2026-84048", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "joomgalleryfriends.net", "product": "JoomGallery extension for Joomla", "cwe": "CWE-284", "title": "Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.1", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84048" }, { "rank": 1123, "cve_id": "CVE-2026-91991", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "tornadoweb", "product": "tornado", "cwe": "CWE-113", "title": "Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91991" }, { "rank": 1124, "cve_id": "CVE-2026-92082", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Payara", "product": "Payara Server", "cwe": "CWE-307", "title": "Payara Server is vulnerable to brute-force login attacks due to the absence of a limit on failed login attempts", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92082" }, { "rank": 1125, "cve_id": "CVE-2026-54561", "cvss_base": 6.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mkreyman", "product": "mcp-memory-keeper", "cwe": "CWE-22", "title": "MCP Memory Keeper: Arbitrary local file read in mcp-memory-keeper context_import via unvalidated filePath", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54561" }, { "rank": 1126, "cve_id": "CVE-2026-49446", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "azukaar", "product": "Cosmos-Server", "cwe": "CWE-285", "title": "Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49446" }, { "rank": 1127, "cve_id": "CVE-2026-54724", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "kiwitcms", "product": "Kiwi", "cwe": "CWE-601", "title": "Kiwi TCMS: Open Redirect via unvalidated next parameter in account confirmation endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54724" }, { "rank": 1128, "cve_id": "CVE-2026-87169", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Contract Lifecycle Management for Public Sector", "cwe": null, "title": "Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Wage Determination Online). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contract Lifecycle Management for Public Sector. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Contract Lifecycle Management for Public Sector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Contract Lifecycle Management for Public Sector accessible data as well as unauthorized read access to a subset of Oracle Contract Lifecycle Management for Public Sector accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87169" }, { "rank": 1129, "cve_id": "CVE-2026-87253", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM accessible data as well as unauthorized read access to a subset of Oracle Agile PLM accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87253" }, { "rank": 1130, "cve_id": "CVE-2026-87278", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87278" }, { "rank": 1131, "cve_id": "CVE-2026-87279", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87279" }, { "rank": 1132, "cve_id": "CVE-2026-91786", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-125", "title": "Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer size", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91786" }, { "rank": 1133, "cve_id": "CVE-2026-55828", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "qbee-io", "product": "transport", "cwe": "CWE-22", "title": "qbee transport: Symlink-chain path traversal in tar extraction (one level outside destination)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55828" }, { "rank": 1134, "cve_id": "CVE-2026-73465", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-532", "title": "On affected platforms running Arista EOS, under certain circumstances plaintext private keys", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73465" }, { "rank": 1135, "cve_id": "CVE-2026-73466", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-532", "title": "On affected platforms running Arista EOS, under certain circumstances plaintext user passwords", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73466" }, { "rank": 1136, "cve_id": "CVE-2026-73467", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-532", "title": "On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73467" }, { "rank": 1137, "cve_id": "CVE-2026-87282", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87282" }, { "rank": 1138, "cve_id": "CVE-2026-87283", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87283" }, { "rank": 1139, "cve_id": "CVE-2026-87285", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87285" }, { "rank": 1140, "cve_id": "CVE-2026-54254", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Cyberdrop-DL", "product": "cyberdrop-dl", "cwe": "CWE-20", "title": "Cyberdrop-DL: Pixeldrain API key shared with unverified thirdparty sites", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54254" }, { "rank": 1141, "cve_id": "CVE-2026-69201", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-22", "title": "Http4s: ResourceService and Webjar Service path escape via percent-encoded separators", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69201" }, { "rank": 1142, "cve_id": "CVE-2026-69206", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-294", "title": "Http4s: DigestAuth allows replay of captured requests", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69206" }, { "rank": 1143, "cve_id": "CVE-2026-69212", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-200", "title": "Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69212" }, { "rank": 1144, "cve_id": "CVE-2026-76700", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76700" }, { "rank": 1145, "cve_id": "CVE-2026-76701", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76701" }, { "rank": 1146, "cve_id": "CVE-2026-77117", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The GNU C Library", "product": "glibc", "cwe": "CWE-835", "title": "SHIFT_JISX0213 decoding may hang on crafted input", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77117" }, { "rank": 1147, "cve_id": "CVE-2026-80489", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The GNU C Library", "product": "glibc", "cwe": "CWE-835", "title": "EUC_JISX0213 decoding may hang on crafted input", "url": "https://www.cve.org/CVERecord?id=CVE-2026-80489" }, { "rank": 1148, "cve_id": "CVE-2026-52724", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "kumahq", "product": "kuma", "cwe": "CWE-295", "title": "kuma-dp connects to control plane without verifying TLS certificate when no CA is configured", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52724" }, { "rank": 1149, "cve_id": "CVE-2026-55591", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "SignalK", "product": "signalk-server", "cwe": "CWE-918", "title": "Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55591" }, { "rank": 1150, "cve_id": "CVE-2026-76702", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76702" }, { "rank": 1151, "cve_id": "CVE-2026-55636", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "projectcapsule", "product": "capsule", "cwe": "CWE-863", "title": "Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55636" }, { "rank": 1152, "cve_id": "CVE-2026-56975", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56975" }, { "rank": 1153, "cve_id": "CVE-2025-11395", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-277", "title": "Podman: arbitrary file write when importing oci archive", "url": "https://www.cve.org/CVERecord?id=CVE-2025-11395" }, { "rank": 1154, "cve_id": "CVE-2026-48722", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "nextflow-io", "product": "nextflow", "cwe": "CWE-276", "title": "Nextflow: Incorrect default permissions in the nextflow auth login command", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48722" }, { "rank": 1155, "cve_id": "CVE-2026-50166", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "kumahq", "product": "kuma", "cwe": "CWE-295", "title": "Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50166" }, { "rank": 1156, "cve_id": "CVE-2026-54637", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dragonflyoss", "product": "dragonfly", "cwe": "CWE-918", "title": "Dragonfly scheduler v1 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54637" }, { "rank": 1157, "cve_id": "CVE-2026-56888", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-203", "title": "In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56888" }, { "rank": 1158, "cve_id": "CVE-2026-56892", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-120", "title": "In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56892" }, { "rank": 1159, "cve_id": "CVE-2026-56958", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-125", "title": "In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56958" }, { "rank": 1160, "cve_id": "CVE-2026-58731", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-125", "title": "In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58731" }, { "rank": 1161, "cve_id": "CVE-2026-76703", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76703" }, { "rank": 1162, "cve_id": "CVE-2026-76704", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": "CWE-79", "title": "Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76704" }, { "rank": 1163, "cve_id": "CVE-2026-76705", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": "CWE-120", "title": "Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76705" }, { "rank": 1164, "cve_id": "CVE-2026-83274", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM MCAD Connector", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83274" }, { "rank": 1165, "cve_id": "CVE-2026-83279", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Agile PLM MCAD Connector", "cwe": null, "title": "Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83279" }, { "rank": 1166, "cve_id": "CVE-2026-91848", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "WuzhiCMS", "cwe": "CWE-74", "title": "WuzhiCMS index.php getDataOfJson sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91848" }, { "rank": 1167, "cve_id": "CVE-2026-91855", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "Open5GS", "cwe": "CWE-404", "title": "Open5GS PFCP Message handler.c denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91855" }, { "rank": 1168, "cve_id": "CVE-2026-92259", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Samsung Opensource", "product": "Escargot", "cwe": "CWE-190", "title": "Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file. This issue affects Escargot: ac94df78493ee6fede286620d94f724e46b4d238.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92259" }, { "rank": 1169, "cve_id": "CVE-2026-11918", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "ContextForge MCP Gateway", "cwe": "CWE-184", "title": "IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11918" }, { "rank": 1170, "cve_id": "CVE-2026-12742", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Business Automation Workflow containers and traditional", "cwe": "CWE-862", "title": "Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12742" }, { "rank": 1171, "cve_id": "CVE-2026-12751", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Cloud Pak for Business Automation", "cwe": "CWE-80", "title": "Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12751" }, { "rank": 1172, "cve_id": "CVE-2026-12910", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-306", "title": "Missing Authentication for Critical Function in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12910" }, { "rank": 1173, "cve_id": "CVE-2026-55226", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "strimzi", "product": "strimzi-kafka-operator", "cwe": "CWE-269", "title": "Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55226" }, { "rank": 1174, "cve_id": "CVE-2026-69216", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-444", "title": "Http4s: Ember chunk parser lenience (TE.TE request smuggling)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69216" }, { "rank": 1175, "cve_id": "CVE-2026-83198", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Field Service", "cwe": null, "title": "Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Field Service, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Field Service accessible data as well as unauthorized read access to a subset of Oracle Field Service accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83198" }, { "rank": 1176, "cve_id": "CVE-2026-83346", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Fusion Middleware Control", "cwe": null, "title": "Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Fusion Middleware Control. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Fusion Middleware Control, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Fusion Middleware Control accessible data as well as unauthorized read access to a subset of Oracle Fusion Middleware Control accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83346" }, { "rank": 1177, "cve_id": "CVE-2026-83419", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Communications Cloud Native Core Security Edge Protection Proxy", "cwe": null, "title": "Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications (component: SEPP). Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Cloud Native Core Security Edge Protection Proxy. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Cloud Native Core Security Edge Protection Proxy accessible data as well as unauthorized read access to a subset of Oracle Communications Cloud Native Core Security Edge Protection Proxy accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83419" }, { "rank": 1178, "cve_id": "CVE-2026-83431", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Product Workbench", "cwe": null, "title": "Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Product Workbench, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Product Workbench accessible data as well as unauthorized read access to a subset of Oracle Product Workbench accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83431" }, { "rank": 1179, "cve_id": "CVE-2026-83488", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": null, "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83488" }, { "rank": 1180, "cve_id": "CVE-2026-32599", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "gravitl", "product": "netmaker", "cwe": "CWE-89", "title": "Netmaker has a boolean‑based SQL Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-32599" }, { "rank": 1181, "cve_id": "CVE-2026-44163", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "fluent-plugins-nursery", "product": "fluent-plugin-opentelemetry", "cwe": "CWE-409", "title": "fluent-plugin-opentelemetry: Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44163" }, { "rank": 1182, "cve_id": "CVE-2026-50024", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WangYihang", "product": "GitHacker", "cwe": "CWE-22", "title": "GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git server", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50024" }, { "rank": 1183, "cve_id": "CVE-2026-55375", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jleehr", "product": "canto-saas-api", "cwe": "CWE-209", "title": "canto-saas-api: OAuth credentials exposed in URL query string and exception messages", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55375" }, { "rank": 1184, "cve_id": "CVE-2026-55863", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "motioneye-project", "product": "motioneye", "cwe": "CWE-862", "title": "motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55863" }, { "rank": 1185, "cve_id": "CVE-2026-73444", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "EOS", "cwe": "CWE-303", "title": "On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73444" }, { "rank": 1186, "cve_id": "CVE-2026-76706", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": "CWE-200", "title": "Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76706" }, { "rank": 1187, "cve_id": "CVE-2026-76863", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-863", "title": "Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76863" }, { "rank": 1188, "cve_id": "CVE-2026-82191", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "j2commerce.com", "product": "J2Store extension for Joomla", "cwe": "CWE-1241", "title": "Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82191" }, { "rank": 1189, "cve_id": "CVE-2026-82567", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mySCADA Technologies", "product": "mySCADA myPRO", "cwe": "CWE-862", "title": "mySCADA myPRO Manager Missing Authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82567" }, { "rank": 1190, "cve_id": "CVE-2026-82837", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-201", "title": "Insertion of Sensitive Information Into Sent Data in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82837" }, { "rank": 1191, "cve_id": "CVE-2026-83109", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Forms", "cwe": null, "title": "Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmode). Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Forms accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83109" }, { "rank": 1192, "cve_id": "CVE-2026-83458", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": null, "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83458" }, { "rank": 1193, "cve_id": "CVE-2026-83459", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": "CWE-400", "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83459" }, { "rank": 1194, "cve_id": "CVE-2026-83480", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Helidon", "cwe": null, "title": "Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83480" }, { "rank": 1195, "cve_id": "CVE-2026-87267", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87267" }, { "rank": 1196, "cve_id": "CVE-2026-91744", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-367", "title": "Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91744" }, { "rank": 1197, "cve_id": "CVE-2026-91922", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "steedos", "product": "steedos-platform", "cwe": "CWE-79", "title": "Steedos Platform through 3.0.15-beta.47 Reflected XSS via page render", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91922" }, { "rank": 1198, "cve_id": "CVE-2026-91962", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-131", "title": "FreeRDP before 3.31.0 Integer Overflow via audin Apple backends", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91962" }, { "rank": 1199, "cve_id": "CVE-2026-91967", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WWBN", "product": "AVideo", "cwe": "CWE-918", "title": "AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91967" }, { "rank": 1200, "cve_id": "CVE-2026-91980", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-200", "title": "vikunja before 2.6.0 Team Enumeration via Project Share", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91980" }, { "rank": 1201, "cve_id": "CVE-2026-91981", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-200", "title": "Vikunja before 2.6.0 User Enumeration via v2 API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91981" }, { "rank": 1202, "cve_id": "CVE-2026-91982", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-522", "title": "Vikunja before 2.6.0 TOTP Secret Disclosure via API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91982" }, { "rank": 1203, "cve_id": "CVE-2026-91983", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-863", "title": "Vikunja before 2.6.0 API Token Scope Bypass via expand Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91983" }, { "rank": 1204, "cve_id": "CVE-2026-91984", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "go-vikunja", "product": "vikunja", "cwe": "CWE-639", "title": "Vikunja before 2.6.0 Broken Object-Level Authorization via task-position", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91984" }, { "rank": 1205, "cve_id": "CVE-2026-91986", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "GitoxideLabs", "product": "gitoxide", "cwe": "CWE-74", "title": "gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91986" }, { "rank": 1206, "cve_id": "CVE-2026-91993", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dromara", "product": "Jpom", "cwe": "CWE-639", "title": "Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91993" }, { "rank": 1207, "cve_id": "CVE-2026-92184", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ag-ui-protocol", "product": "ag-ui", "cwe": "CWE-918", "title": "ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92184" }, { "rank": 1208, "cve_id": "CVE-2026-92255", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-125", "title": "Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92255" }, { "rank": 1209, "cve_id": "CVE-2026-76796", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Newell Brands", "product": "DYMO Connect Desktop", "cwe": "CWE-73", "title": "Newell Brands DYMO Connect Desktop improper file path validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76796" }, { "rank": 1210, "cve_id": "CVE-2026-76867", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-79", "title": "Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI Handlers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76867" }, { "rank": 1211, "cve_id": "CVE-2026-76872", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-79", "title": "Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management Pages", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76872" }, { "rank": 1212, "cve_id": "CVE-2026-76873", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-79", "title": "Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76873" }, { "rank": 1213, "cve_id": "CVE-2026-87793", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Developers Italia", "product": "design-scuole-wordpress-theme", "cwe": "CWE-79", "title": "Reflected XSS in WordPress theme design-scuole-wordpress-theme", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87793" }, { "rank": 1214, "cve_id": "CVE-2026-89307", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Developers Italia", "product": "design-scuole-wordpress-theme", "cwe": "CWE-601", "title": "HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89307" }, { "rank": 1215, "cve_id": "CVE-2026-91717", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-862", "title": "Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91717" }, { "rank": 1216, "cve_id": "CVE-2026-91942", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "unclecode", "product": "crawl4ai", "cwe": "CWE-79", "title": "crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91942" }, { "rank": 1217, "cve_id": "CVE-2026-91944", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "unclecode", "product": "crawl4ai", "cwe": "CWE-79", "title": "crawl4ai before 0.9.3 DOM-based XSS via Playground UI", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91944" }, { "rank": 1218, "cve_id": "CVE-2026-92002", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "MISP", "product": "MISP", "cwe": "CWE-778", "title": "MISP: Authentication failure logging suppressed during Redis unavailability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92002" }, { "rank": 1219, "cve_id": "CVE-2026-92234", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "QloApps", "cwe": "CWE-79", "title": "QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92234" }, { "rank": 1220, "cve_id": "CVE-2026-92257", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-79", "title": "Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92257" }, { "rank": 1221, "cve_id": "CVE-2026-48737", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pyload", "product": "pyload", "cwe": "CWE-918", "title": "pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48737" }, { "rank": 1222, "cve_id": "CVE-2026-44282", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "decidim", "product": "decidim", "cwe": "CWE-79", "title": "Election question titles allow stored script execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44282" }, { "rank": 1223, "cve_id": "CVE-2026-47215", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sylabs", "product": "singularity", "cwe": "CWE-22", "title": "Singularity: Incorrect path matching for 'limit container paths' directive", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47215" }, { "rank": 1224, "cve_id": "CVE-2026-48785", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "apptainer", "product": "apptainer", "cwe": "CWE-22", "title": "Apptainer: Incorrect path matching for 'limit container paths' directive", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48785" }, { "rank": 1225, "cve_id": "CVE-2026-55374", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jleehr", "product": "canto-saas-api", "cwe": "CWE-74", "title": "canto-saas-api: Authenticated API requests can be redirected via unencoded path variables", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55374" }, { "rank": 1226, "cve_id": "CVE-2026-69211", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "http4s", "product": "http4s", "cwe": "CWE-113", "title": "Http4s: Set-Cookie rendering does not escape attribute delimiters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69211" }, { "rank": 1227, "cve_id": "CVE-2026-76858", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-79", "title": "Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76858" }, { "rank": 1228, "cve_id": "CVE-2026-76864", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netcore", "product": "NR255-V", "cwe": "CWE-79", "title": "Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76864" }, { "rank": 1229, "cve_id": "CVE-2026-86472", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "fast-uri", "product": "fast-uri", "cwe": "CWE-178", "title": "fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86472" }, { "rank": 1230, "cve_id": "CVE-2026-86818", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "fast-uri", "product": "fast-uri", "cwe": "CWE-172", "title": "fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86818" }, { "rank": 1231, "cve_id": "CVE-2026-58196", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "stacklok", "product": "toolhive", "cwe": "CWE-918", "title": "ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58196" }, { "rank": 1232, "cve_id": "CVE-2026-91720", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-908", "title": "Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91720" }, { "rank": 1233, "cve_id": "CVE-2026-91726", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-125", "title": "Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91726" }, { "rank": 1234, "cve_id": "CVE-2026-87275", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.6 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87275" }, { "rank": 1235, "cve_id": "CVE-2026-79705", "cvss_base": 4.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "cwe": "CWE-22", "title": "Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79705" }, { "rank": 1236, "cve_id": "CVE-2026-0177", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-120", "title": "In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0177" }, { "rank": 1237, "cve_id": "CVE-2026-0183", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-441", "title": "In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0183" }, { "rank": 1238, "cve_id": "CVE-2026-0197", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-200", "title": "In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0197" }, { "rank": 1239, "cve_id": "CVE-2026-55650", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "outerbase", "product": "studio", "cwe": "CWE-79", "title": "Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55650" }, { "rank": 1240, "cve_id": "CVE-2026-56950", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-20", "title": "In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56950" }, { "rank": 1241, "cve_id": "CVE-2026-57006", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-693", "title": "In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57006" }, { "rank": 1242, "cve_id": "CVE-2026-58721", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": "CWE-457", "title": "In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58721" }, { "rank": 1243, "cve_id": "CVE-2026-79699", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "cwe": "CWE-59", "title": "Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79699" }, { "rank": 1244, "cve_id": "CVE-2026-87274", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87274" }, { "rank": 1245, "cve_id": "CVE-2026-53954", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "bugsink", "product": "bugsink", "cwe": "CWE-400", "title": "Bugsink: DOS using large numbers of event tags", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53954" }, { "rank": 1246, "cve_id": "CVE-2026-54503", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "plone", "product": "plone.app.textfield", "cwe": "CWE-80", "title": "plone.app.textfield: Stored XSS by spoofing mime type", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54503" }, { "rank": 1247, "cve_id": "CVE-2026-76707", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "cwe": null, "title": "Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76707" }, { "rank": 1248, "cve_id": "CVE-2026-83416", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Coherence", "cwe": null, "title": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Coherence. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83416" }, { "rank": 1249, "cve_id": "CVE-2026-91740", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-908", "title": "Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91740" }, { "rank": 1250, "cve_id": "CVE-2026-91746", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-190", "title": "Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91746" }, { "rank": 1251, "cve_id": "CVE-2026-87280", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87280" }, { "rank": 1252, "cve_id": "CVE-2026-19504", "cvss_base": 4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fabric.js", "product": "Fabric.js", "cwe": "CWE-918", "title": "Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19504" }, { "rank": 1253, "cve_id": "CVE-2026-91926", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "cwe": "CWE-401", "title": "Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via duplicated av_pair entries in ntlm challenge", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91926" }, { "rank": 1254, "cve_id": "CVE-2026-87281", "cvss_base": 3.2, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87281" }, { "rank": 1255, "cve_id": "CVE-2026-87284", "cvss_base": 3.2, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle VM VirtualBox", "cwe": null, "title": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 3.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87284" }, { "rank": 1256, "cve_id": "CVE-2026-83369", "cvss_base": 3.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Access Manager", "cwe": null, "title": "Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Access SDK). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Access Manager. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83369" }, { "rank": 1257, "cve_id": "CVE-2026-91708", "cvss_base": 3.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-367", "title": "Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91708" }, { "rank": 1258, "cve_id": "CVE-2026-91747", "cvss_base": 3.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91747" }, { "rank": 1259, "cve_id": "CVE-2026-44778", "cvss_base": 2.9, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "inspektor-gadget", "product": "inspektor-gadget", "cwe": "CWE-20", "title": "Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44778" }, { "rank": 1260, "cve_id": "CVE-2026-49254", "cvss_base": 2.9, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dragonflyoss", "product": "dragonfly", "cwe": "CWE-200", "title": "Dragonfly Manager OAuth provider client_secret disclosure via unauthenticated GET /api/v1/oauth", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49254" }, { "rank": 1261, "cve_id": "CVE-2026-54450", "cvss_base": 2.9, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "stacklok", "product": "toolhive", "cwe": "CWE-918", "title": "ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54450" }, { "rank": 1262, "cve_id": "CVE-2026-83414", "cvss_base": 2.5, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Coherence", "cwe": null, "title": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83414" }, { "rank": 1263, "cve_id": "CVE-2026-55775", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "openbao", "product": "openbao", "cwe": "CWE-285", "title": "OpenBao's System Backend allows Unauthorized Management of the containing Namespace", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55775" }, { "rank": 1264, "cve_id": "CVE-2026-68532", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-352", "title": "Concrete CMS 9.0.0 to 9.5.2 is vunerable to CSRF in Concrete CMS Group Type Deletion Dashboard Action", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68532" }, { "rank": 1265, "cve_id": "CVE-2026-68533", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "Missing Authorization in Concrete CMS versions below 9.5.3 Conversation File Upload Allows File Import Without the Add Message Attachments Permission", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68533" }, { "rank": 1266, "cve_id": "CVE-2026-68534", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-79", "title": "Concrete CMS below 9.5.2 is vulnerable to Stored XSS via unescaped Express entry labels in association selectors", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68534" }, { "rank": 1267, "cve_id": "CVE-2026-81919", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-352", "title": "Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Block Arrangement Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81919" }, { "rank": 1268, "cve_id": "CVE-2026-81920", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-352", "title": "Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Dashboard SEO Excluded Words Reset Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81920" }, { "rank": 1269, "cve_id": "CVE-2026-81921", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "In Concrete CMS 8.5.3 to 9,5,2, OAuth 2.0 Refresh-Token Grant Bypasses Account Status", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81921" }, { "rank": 1270, "cve_id": "CVE-2026-91957", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-416", "title": "FreeRDP before 3.31.0 Use-After-Free via smartcard worker", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91957" }, { "rank": 1271, "cve_id": "CVE-2026-18421", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "Concrete CMS 9.0.0-9.5.2 Boards data source dashboard is missing an authorization check, allowing a low-privileged board editor to modify or delete configured data sources on boards they do not control", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18421" }, { "rank": 1272, "cve_id": "CVE-2026-18422", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "Concrete CMS below 9.5.3 Multilingual Page Assign Action Lacks Destination Authorization and CSRF Token Validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18422" }, { "rank": 1273, "cve_id": "CVE-2026-18423", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-639", "title": "Concrete CMS 9.0.0 through 9.5.2 is vulnerable to Insecure direct object reference (IDOR) in the Express saved search preset delete and edit dialogs allowing an authenticated user with permission on one Express entity to delete or rename saved search pres", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18423" }, { "rank": 1274, "cve_id": "CVE-2026-18424", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-918", "title": "Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different ports", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18424" }, { "rank": 1275, "cve_id": "CVE-2026-18425", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-352", "title": "IDOR in Concrete CMS 9.0.0 through 9.5.2 dashboard sitemap reorder (SitemapUpdate::updateDisplayOrder) allows an authenticated sitemap user to reorder arbitrary pages", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18425" }, { "rank": 1276, "cve_id": "CVE-2026-55774", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "openbao", "product": "openbao", "cwe": "CWE-863", "title": "OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55774" }, { "rank": 1277, "cve_id": "CVE-2026-68529", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "Concrete CMS 9.0.0 through 9.5.2 us missing authorization in the Express entries advanced-search dashboard action allowing a low-privileged user to read other entities' Express entries", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68529" }, { "rank": 1278, "cve_id": "CVE-2026-68530", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "Concrete CMS 9.0.0 through 9.5.2 is Missing Authorization on Board Instance Actions Allowed a Board Editor to Access and Delete Other Boards' Instances", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68530" }, { "rank": 1279, "cve_id": "CVE-2026-68531", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-405", "title": "Concrete CMS below 9.5.3 is vulnerable to Authenticated Denial of Service via Unescaped SQL LIKE Wildcards in Keyword Search", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68531" }, { "rank": 1280, "cve_id": "CVE-2026-81922", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "\"In Concrete CMS below 9.5.3, there is Missing authorization in the sitemap page reorder allowing low-privilege users to reorder arbitrary pages \"", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81922" }, { "rank": 1281, "cve_id": "CVE-2026-81923", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "Concrete CMS below 9.5.3 is missing authorization in the SEO Bulk Update Meta Tags editor", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81923" }, { "rank": 1282, "cve_id": "CVE-2026-81924", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-352", "title": "Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Theme Page Template Activation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81924" }, { "rank": 1283, "cve_id": "CVE-2026-81925", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-79", "title": "Concrete CMS below 9.5.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via Conversation Custom Date Format", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81925" }, { "rank": 1284, "cve_id": "CVE-2026-91849", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "WuzhiCMS", "cwe": "CWE-284", "title": "WuzhiCMS Avatar Upload index.php setAvatar unrestricted upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91849" }, { "rank": 1285, "cve_id": "CVE-2026-91853", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "X5000R", "cwe": "CWE-77", "title": "TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91853" }, { "rank": 1286, "cve_id": "CVE-2026-91854", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "code-projects", "product": "Record Management System", "cwe": "CWE-79", "title": "code-projects Record Management System reg.php cross site scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91854" }, { "rank": 1287, "cve_id": "CVE-2026-18426", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-862", "title": "Concrete CMS 9.0.0 to 9.5.2 Express Form block missing authorization allows an authenticated editor to modify Express Forms they cannot edit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18426" }, { "rank": 1288, "cve_id": "CVE-2026-81926", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-79", "title": "Concrete CMS 9.4.0 through 9.5.2 is vulnerable to Cross-site scripting in the location panel duplicate-path confirmation dialog", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81926" }, { "rank": 1289, "cve_id": "CVE-2026-83413", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Oracle Corporation", "product": "Oracle Coherence", "cwe": null, "title": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Coherence accessible data. CVSS 3.1 Base Score 1.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83413" }, { "rank": 1290, "cve_id": "CVE-2026-81927", "cvss_base": 1.8, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Concrete CMS", "product": "Concrete CMS", "cwe": "CWE-79", "title": "Concrete CMS before 9.5.3 is vulnerable to Stored XSS via SVG upload in \"Reject\" sanitization mode", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81927" }, { "rank": 1291, "cve_id": "CVE-2026-91842", "cvss_base": 1.2, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenBankProject", "product": "OBP-API", "cwe": "CWE-20", "title": "OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91842" }, { "rank": 1292, "cve_id": "CVE-2026-91835", "cvss_base": 0.9, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenClaw", "product": "ClawScan", "cwe": "CWE-436", "title": "OpenClaw ClawScan File Classifier static_scanner.go IsBinaryFile interpretation conflict", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91835" }, { "rank": 1293, "cve_id": "CVE-2026-91836", "cvss_base": 0.9, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenClaw", "product": "ClawScan", "cwe": "CWE-1023", "title": "OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91836" }, { "rank": 1294, "cve_id": "CVE-2026-55630", "cvss_base": 0, "cvss_severity": "NONE", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "kiwitcms", "product": "Kiwi", "cwe": "CWE-79", "title": "Kiwi TCMS: Stored XSS via javascript: URI in extra_link field (TestPlan & TestCase)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55630" }, { "rank": 1295, "cve_id": "CVE-2026-0179", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0179" }, { "rank": 1296, "cve_id": "CVE-2026-0186", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0186" }, { "rank": 1297, "cve_id": "CVE-2026-0187", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0187" }, { "rank": 1298, "cve_id": "CVE-2026-0189", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0189" }, { "rank": 1299, "cve_id": "CVE-2026-0192", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0192" }, { "rank": 1300, "cve_id": "CVE-2026-0194", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0194" }, { "rank": 1301, "cve_id": "CVE-2026-11921", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Verify Identity Access", "cwe": "CWE-522", "title": "Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11921" }, { "rank": 1302, "cve_id": "CVE-2026-11927", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Verify Identity Access", "cwe": "CWE-74", "title": "Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11927" }, { "rank": 1303, "cve_id": "CVE-2026-11928", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Verify Identity Access", "cwe": "CWE-787", "title": "Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11928" }, { "rank": 1304, "cve_id": "CVE-2026-12101", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Verify Identity Access", "cwe": "CWE-289", "title": "Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12101" }, { "rank": 1305, "cve_id": "CVE-2026-13327", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Devolutions", "product": "Server", "cwe": "CWE-295", "title": "Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept privileged directory service credentials via a spoofed domain controller certificate.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13327" }, { "rank": 1306, "cve_id": "CVE-2026-25825", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user (with admin access) the possibility to write files in arbitrary directories in the server filesystem and potentially overwrite files accessible by the local user JBoss.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25825" }, { "rank": 1307, "cve_id": "CVE-2026-25826", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "An issue was discovered in Keyfactor SignServer before 7.6.0. The attribute ATTRIBUTESFILE in PKCS11CryptoToken can be set to a readable file but not an accepted file (i.e., recognized with attributes). In this case, an error is thrown which - together with the error - also prints the content of the file to the application server log. This gives a user that has both SignServer admin access and access to read the output of the server log (i.e., if remote syslog shipping is configured), the possibility to read the content of files accessible by the local user JBoss.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25826" }, { "rank": 1308, "cve_id": "CVE-2026-25827", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "An issue was discovered in Keyfactor SignServer before 7.6.0. A number of properties were identified to not have any restrictions to what path they can be set to by an admin user. Setting these properties to specific file paths can reveal information to the client side. Three specific properties were identified: The property ATTRIBUTESFILE in PKCS11CryotoToken can be set to a readable but not an accepted (i.e., recognized with attributes) file. In this case an error is thrown, confirming the existence of the file. The property KEYSTOREPATH in KeyStoreCryptoToken can be set to a non-existing file that will return an error confirming to the client side that the file does not exist. The property TRUSTSTOREPATH in RenewalWorker can be set to any path (without any restrictions) by an admin user. In the case that the provided path points to an existing file, readable by the user running the application server, but is not a recognized PEM format, it returns this as an error to the client side, confirming the existences of the file.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25827" }, { "rank": 1309, "cve_id": "CVE-2026-37152", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-37152" }, { "rank": 1310, "cve_id": "CVE-2026-39038", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "BharatMLStack up to and including v1.3.0 is vulnerable to Cross Site Scripting (XSS) in the component Trufflebox UI (trufflebox-ui) in GenericNumerixTable.jsx.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39038" }, { "rank": 1311, "cve_id": "CVE-2026-39039", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage, which is fully accessible to any JavaScript running on the page.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39039" }, { "rank": 1312, "cve_id": "CVE-2026-39040", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Scripting (XSS) via the component Trufflebox UI (trufflebox-ui) in ExpressionViewModal.jsx.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39040" }, { "rank": 1313, "cve_id": "CVE-2026-51133", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-51133" }, { "rank": 1314, "cve_id": "CVE-2026-51134", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-51134" }, { "rank": 1315, "cve_id": "CVE-2026-55301", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55301" }, { "rank": 1316, "cve_id": "CVE-2026-55302", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55302" }, { "rank": 1317, "cve_id": "CVE-2026-55304", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55304" }, { "rank": 1318, "cve_id": "CVE-2026-55359", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55359" }, { "rank": 1319, "cve_id": "CVE-2026-55366", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55366" }, { "rank": 1320, "cve_id": "CVE-2026-56881", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56881" }, { "rank": 1321, "cve_id": "CVE-2026-56889", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56889" }, { "rank": 1322, "cve_id": "CVE-2026-56907", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56907" }, { "rank": 1323, "cve_id": "CVE-2026-56914", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56914" }, { "rank": 1324, "cve_id": "CVE-2026-56932", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56932" }, { "rank": 1325, "cve_id": "CVE-2026-56941", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56941" }, { "rank": 1326, "cve_id": "CVE-2026-56960", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56960" }, { "rank": 1327, "cve_id": "CVE-2026-56970", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56970" }, { "rank": 1328, "cve_id": "CVE-2026-56973", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56973" }, { "rank": 1329, "cve_id": "CVE-2026-56978", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56978" }, { "rank": 1330, "cve_id": "CVE-2026-56979", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56979" }, { "rank": 1331, "cve_id": "CVE-2026-56982", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56982" }, { "rank": 1332, "cve_id": "CVE-2026-56985", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56985" }, { "rank": 1333, "cve_id": "CVE-2026-56986", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56986" }, { "rank": 1334, "cve_id": "CVE-2026-57012", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57012" }, { "rank": 1335, "cve_id": "CVE-2026-57042", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57042" }, { "rank": 1336, "cve_id": "CVE-2026-58678", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58678" }, { "rank": 1337, "cve_id": "CVE-2026-58679", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58679" }, { "rank": 1338, "cve_id": "CVE-2026-58691", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58691" }, { "rank": 1339, "cve_id": "CVE-2026-58695", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58695" }, { "rank": 1340, "cve_id": "CVE-2026-58699", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Android", "cwe": null, "title": "In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58699" }, { "rank": 1341, "cve_id": "CVE-2026-79303", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injection. Dynamic SQL statements are generated without the required data validation and without using parameterized statements or stored procedures.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79303" }, { "rank": 1342, "cve_id": "CVE-2026-79411", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding only the settings.users.edit permission to escalate to full administrator. The user-update endpoint (route admin.settings.users.update, UserController::update()) does not verify that the actor is permitted to grant the requested role, does not prevent a user from changing their own role, and does not restrict assignment to roles whose permission set is a subset of the actor's own. By submitting a request that sets role_id to the Administrator role for their own account, a low-privileged administrator gains every admin-panel capability, including store configuration, payment gateway credentials, and customer PII.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79411" }, { "rank": 1343, "cve_id": "CVE-2026-79551", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79551" }, { "rank": 1344, "cve_id": "CVE-2026-84850", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Devolutions", "product": "Server", "cwe": "CWE-295", "title": "Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84850" }, { "rank": 1345, "cve_id": "CVE-2026-88617", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a remote attacker to escalate privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88617" }, { "rank": 1346, "cve_id": "CVE-2026-88620", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enforce the required function-level permission or data-scope authorization, allowing an authenticated low-privileged employee to retrieve employee records belonging to other departments and users", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88620" }, { "rank": 1347, "cve_id": "CVE-2026-88621", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload() method in class/Api.php. An authenticated administrator can submit a non-HTML upload filename matching an existing file in the application's working directory. The application passes the user-controlled filename to unlink() when rejecting the upload, potentially causing file deletion and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88621" }, { "rank": 1348, "cve_id": "CVE-2026-88742", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88742" }, { "rank": 1349, "cve_id": "CVE-2026-88743", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88743" }, { "rank": 1350, "cve_id": "CVE-2026-90969", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Devolutions", "product": "Server", "cwe": "CWE-284", "title": "Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authenticated user lacking the view-password permission to obtain cleartext passwords via a request to the entry listing endpoint with password disclosure parameters.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90969" }, { "rank": 1351, "cve_id": "CVE-2026-90971", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Devolutions", "product": "Server", "cwe": "CWE-863", "title": "Server-Side Request Forgery (SSRF) in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other users' credentials and reach internal or cloud-metadata network endpoints via a crafted connection definition submitted for datacenter discovery.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90971" }, { "rank": 1352, "cve_id": "CVE-2026-91711", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-787", "title": "Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91711" }, { "rank": 1353, "cve_id": "CVE-2026-91713", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-862", "title": "Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91713" }, { "rank": 1354, "cve_id": "CVE-2026-91714", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-203", "title": "Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91714" }, { "rank": 1355, "cve_id": "CVE-2026-91715", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-843", "title": "Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91715" }, { "rank": 1356, "cve_id": "CVE-2026-91716", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91716" }, { "rank": 1357, "cve_id": "CVE-2026-91719", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-94", "title": "Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91719" }, { "rank": 1358, "cve_id": "CVE-2026-91722", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91722" }, { "rank": 1359, "cve_id": "CVE-2026-91723", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-362", "title": "Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91723" }, { "rank": 1360, "cve_id": "CVE-2026-91725", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-203", "title": "Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91725" }, { "rank": 1361, "cve_id": "CVE-2026-91729", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91729" }, { "rank": 1362, "cve_id": "CVE-2026-91730", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-459", "title": "Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91730" }, { "rank": 1363, "cve_id": "CVE-2026-91732", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-862", "title": "Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91732" }, { "rank": 1364, "cve_id": "CVE-2026-91737", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91737" }, { "rank": 1365, "cve_id": "CVE-2026-91738", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-20", "title": "Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91738" }, { "rank": 1366, "cve_id": "CVE-2026-91739", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-862", "title": "Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91739" }, { "rank": 1367, "cve_id": "CVE-2026-91742", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-441", "title": "Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91742" }, { "rank": 1368, "cve_id": "CVE-2026-91745", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91745" }, { "rank": 1369, "cve_id": "CVE-2026-92005", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the Audio/Video: Web Codecs component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92005" }, { "rank": 1370, "cve_id": "CVE-2026-92016", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the Disability Access APIs component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92016" }, { "rank": 1371, "cve_id": "CVE-2026-92018", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape in the DOM: Core & HTML component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92018" }, { "rank": 1372, "cve_id": "CVE-2026-92019", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Remote Settings Client component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92019" }, { "rank": 1373, "cve_id": "CVE-2026-92021", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the JavaScript Engine: JIT component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92021" }, { "rank": 1374, "cve_id": "CVE-2026-92022", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the DOM: HTML Parser component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92022" }, { "rank": 1375, "cve_id": "CVE-2026-92023", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the XML component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92023" }, { "rank": 1376, "cve_id": "CVE-2026-92024", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the SVG component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92024" }, { "rank": 1377, "cve_id": "CVE-2026-92025", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the DOM: Navigation component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92025" }, { "rank": 1378, "cve_id": "CVE-2026-92026", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92026" }, { "rank": 1379, "cve_id": "CVE-2026-92027", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the DOM: Streams component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92027" }, { "rank": 1380, "cve_id": "CVE-2026-92028", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the DOM: Core & HTML component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92028" }, { "rank": 1381, "cve_id": "CVE-2026-92029", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the SVG component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92029" }, { "rank": 1382, "cve_id": "CVE-2026-92030", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92030" }, { "rank": 1383, "cve_id": "CVE-2026-92031", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Information disclosure in the Graphics: ImageLib component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92031" }, { "rank": 1384, "cve_id": "CVE-2026-92032", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to invalid pointer in the Graphics component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92032" }, { "rank": 1385, "cve_id": "CVE-2026-92034", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Site isolation issue in the Graphics component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92034" }, { "rank": 1386, "cve_id": "CVE-2026-92035", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to incorrect boundary conditions in the Graphics component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92035" }, { "rank": 1387, "cve_id": "CVE-2026-92036", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the Networking: HTTP component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92036" }, { "rank": 1388, "cve_id": "CVE-2026-92037", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the DOM: Animation component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92037" }, { "rank": 1389, "cve_id": "CVE-2026-92038", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Remote Settings Client component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92038" }, { "rank": 1390, "cve_id": "CVE-2026-92039", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the DOM: Notifications component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92039" }, { "rank": 1391, "cve_id": "CVE-2026-92040", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the JavaScript: WebAssembly component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92040" }, { "rank": 1392, "cve_id": "CVE-2026-92041", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the DOM: Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92041" }, { "rank": 1393, "cve_id": "CVE-2026-92042", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Race condition in the DOM: Content Processes component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92042" }, { "rank": 1394, "cve_id": "CVE-2026-92044", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Information disclosure in the Networking: HTTP component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92044" }, { "rank": 1395, "cve_id": "CVE-2026-92045", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to incorrect boundary conditions in the WebRTC component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92045" }, { "rank": 1396, "cve_id": "CVE-2026-92046", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the Graphics component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92046" }, { "rank": 1397, "cve_id": "CVE-2026-92048", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92048" }, { "rank": 1398, "cve_id": "CVE-2026-92049", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the Widget: Win32 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92049" }, { "rank": 1399, "cve_id": "CVE-2026-92050", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to race condition in the XPConnect component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92050" }, { "rank": 1400, "cve_id": "CVE-2026-92051", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Spoofing issue due to invalid pointer in the Graphics component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92051" }, { "rank": 1401, "cve_id": "CVE-2026-92056", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the Graphics: Text component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92056" }, { "rank": 1402, "cve_id": "CVE-2026-92057", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Enterprise Policies component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92057" }, { "rank": 1403, "cve_id": "CVE-2026-92058", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the Graphics component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92058" }, { "rank": 1404, "cve_id": "CVE-2026-92059", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the DOM: Editor component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92059" }, { "rank": 1405, "cve_id": "CVE-2026-92060", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the Internationalization component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92060" }, { "rank": 1406, "cve_id": "CVE-2026-92061", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the Security: Process Sandboxing component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92061" }, { "rank": 1407, "cve_id": "CVE-2026-92063", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Denial-of-service in the Audio/Video component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92063" }, { "rank": 1408, "cve_id": "CVE-2026-92064", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92064" }, { "rank": 1409, "cve_id": "CVE-2026-92065", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92065" }, { "rank": 1410, "cve_id": "CVE-2026-92066", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape in the Profile Backup component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92066" }, { "rank": 1411, "cve_id": "CVE-2026-92067", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Use-after-free in the Widget: Gtk component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92067" }, { "rank": 1412, "cve_id": "CVE-2026-92068", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Site isolation issue in the Reader Mode component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92068" }, { "rank": 1413, "cve_id": "CVE-2026-92069", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Spoofing issue in the DOM: Navigation component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92069" }, { "rank": 1414, "cve_id": "CVE-2026-92070", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Information disclosure in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92070" }, { "rank": 1415, "cve_id": "CVE-2026-92071", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92071" }, { "rank": 1416, "cve_id": "CVE-2026-92072", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the Safe Browsing component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92072" }, { "rank": 1417, "cve_id": "CVE-2026-92074", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Popup Blocker component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92074" }, { "rank": 1418, "cve_id": "CVE-2026-92075", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92075" }, { "rank": 1419, "cve_id": "CVE-2026-92076", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92076" }, { "rank": 1420, "cve_id": "CVE-2026-92077", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Denial-of-service in the SVG component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92077" }, { "rank": 1421, "cve_id": "CVE-2026-92078", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Denial-of-service in the Security component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92078" }, { "rank": 1422, "cve_id": "CVE-2026-92079", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Widget: Win32 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92079" }, { "rank": 1423, "cve_id": "CVE-2026-92237", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Devolutions", "product": "PowerShell Universal", "cwe": "CWE-532", "title": "Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL parameter values written to the system log on instances backed by Microsoft SQL Server.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92237" }, { "rank": 1424, "cve_id": "CVE-2026-92238", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Thunderbird", "cwe": null, "title": "Ambiguous parsing of mail headers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92238" }, { "rank": 1425, "cve_id": "CVE-2026-92239", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Thunderbird", "cwe": null, "title": "Buffer overrun in IMAP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92239" }, { "rank": 1426, "cve_id": "CVE-2026-92240", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Thunderbird", "cwe": null, "title": "Out-of-bounds read in IMAP response parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92240" } ], "transactions": [ { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-10966", "detail": "EXPLOIT PUBLISHED — CVE-2025-10966 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-14524", "detail": "EXPLOIT PUBLISHED — CVE-2025-14524 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-15079", "detail": "EXPLOIT PUBLISHED — CVE-2025-15079 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-15224", "detail": "EXPLOIT PUBLISHED — CVE-2025-15224 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10536", "detail": "EXPLOIT PUBLISHED — CVE-2026-10536 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-11352", "detail": "EXPLOIT PUBLISHED — CVE-2026-11352 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-11564", "detail": "EXPLOIT PUBLISHED — CVE-2026-11564 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-11586", "detail": "EXPLOIT PUBLISHED — CVE-2026-11586 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-11856", "detail": "EXPLOIT PUBLISHED — CVE-2026-11856 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-12064", "detail": "EXPLOIT PUBLISHED — CVE-2026-12064 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-13608", "detail": "EXPLOIT PUBLISHED — CVE-2026-13608 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-18924", "detail": "EXPLOIT PUBLISHED — CVE-2026-18924 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19931", "detail": "EXPLOIT PUBLISHED — CVE-2026-19931 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-3783", "detail": "EXPLOIT PUBLISHED — CVE-2026-3783 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-3784", "detail": "EXPLOIT PUBLISHED — CVE-2026-3784 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-44901", "detail": "EXPLOIT PUBLISHED — CVE-2026-44901 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-45798", "detail": "EXPLOIT PUBLISHED — CVE-2026-45798 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-46331", "detail": "EXPLOIT PUBLISHED — CVE-2026-46331 (Linux). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-48024", "detail": "EXPLOIT PUBLISHED — CVE-2026-48024 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-48162", "detail": "EXPLOIT PUBLISHED — CVE-2026-48162 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-4873", "detail": "EXPLOIT PUBLISHED — CVE-2026-4873 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-49392", "detail": "EXPLOIT PUBLISHED — CVE-2026-49392 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-49441", "detail": "EXPLOIT PUBLISHED — CVE-2026-49441 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-52023", "detail": "EXPLOIT PUBLISHED — CVE-2026-52023. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-54083", "detail": "EXPLOIT PUBLISHED — CVE-2026-54083 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-54084", "detail": "EXPLOIT PUBLISHED — CVE-2026-54084 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-5545", "detail": "EXPLOIT PUBLISHED — CVE-2026-5545 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-5773", "detail": "EXPLOIT PUBLISHED — CVE-2026-5773 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58014", "detail": "EXPLOIT PUBLISHED — CVE-2026-58014 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58015", "detail": "EXPLOIT PUBLISHED — CVE-2026-58015 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-61783", "detail": "EXPLOIT PUBLISHED — CVE-2026-61783 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-61800", "detail": "EXPLOIT PUBLISHED — CVE-2026-61800 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-61802", "detail": "EXPLOIT PUBLISHED — CVE-2026-61802 (wazuh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-6253", "detail": "EXPLOIT PUBLISHED — CVE-2026-6253 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-6276", "detail": "EXPLOIT PUBLISHED — CVE-2026-6276 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-6429", "detail": "EXPLOIT PUBLISHED — CVE-2026-6429 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-67621", "detail": "EXPLOIT PUBLISHED — CVE-2026-67621 (FlowiseAI Flowise). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-67622", "detail": "EXPLOIT PUBLISHED — CVE-2026-67622 (FlowiseAI Flowise). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-70636", "detail": "EXPLOIT PUBLISHED — CVE-2026-70636 (FlowiseAI Flowise). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-7168", "detail": "EXPLOIT PUBLISHED — CVE-2026-7168 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-73698", "detail": "EXPLOIT PUBLISHED — CVE-2026-73698 (FileRun). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-79513", "detail": "EXPLOIT PUBLISHED — CVE-2026-79513. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-79514", "detail": "EXPLOIT PUBLISHED — CVE-2026-79514. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-79522", "detail": "EXPLOIT PUBLISHED — CVE-2026-79522. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-80229", "detail": "EXPLOIT PUBLISHED — CVE-2026-80229 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-80230", "detail": "EXPLOIT PUBLISHED — CVE-2026-80230 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-80231", "detail": "EXPLOIT PUBLISHED — CVE-2026-80231 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-80255", "detail": "EXPLOIT PUBLISHED — CVE-2026-80255 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-82208", "detail": "EXPLOIT PUBLISHED — CVE-2026-82208 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-82209", "detail": "EXPLOIT PUBLISHED — CVE-2026-82209 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-8286", "detail": "EXPLOIT PUBLISHED — CVE-2026-8286 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-8458", "detail": "EXPLOIT PUBLISHED — CVE-2026-8458 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-86137", "detail": "EXPLOIT PUBLISHED — CVE-2026-86137 (xmlsoft libxml2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-86143", "detail": "EXPLOIT PUBLISHED — CVE-2026-86143 (xmlsoft libxml2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-87011", "detail": "EXPLOIT PUBLISHED — CVE-2026-87011 (open-webui). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-87012", "detail": "EXPLOIT PUBLISHED — CVE-2026-87012 (open-webui). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-87013", "detail": "EXPLOIT PUBLISHED — CVE-2026-87013 (open-webui). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-87014", "detail": "EXPLOIT PUBLISHED — CVE-2026-87014 (open-webui). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-87015", "detail": "EXPLOIT PUBLISHED — CVE-2026-87015 (open-webui). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-87016", "detail": "EXPLOIT PUBLISHED — CVE-2026-87016 (open-webui). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-89009", "detail": "EXPLOIT PUBLISHED — CVE-2026-89009 (WAVLINK Technology WN535M1). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-8924", "detail": "EXPLOIT PUBLISHED — CVE-2026-8924 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-8925", "detail": "EXPLOIT PUBLISHED — CVE-2026-8925 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-8926", "detail": "EXPLOIT PUBLISHED — CVE-2026-8926 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-89263", "detail": "EXPLOIT PUBLISHED — CVE-2026-89263 (moxi624 MoguBlog). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-8927", "detail": "EXPLOIT PUBLISHED — CVE-2026-8927 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-8932", "detail": "EXPLOIT PUBLISHED — CVE-2026-8932 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90488", "detail": "EXPLOIT PUBLISHED — CVE-2026-90488 (Xuxueli xxl-job). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90491", "detail": "EXPLOIT PUBLISHED — CVE-2026-90491 (sanjevirau gsubs). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90498", "detail": "EXPLOIT PUBLISHED — CVE-2026-90498 (lenve vhr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90508", "detail": "EXPLOIT PUBLISHED — CVE-2026-90508 (Chengdu Qilu Technology Ludashi). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90514", "detail": "EXPLOIT PUBLISHED — CVE-2026-90514 (SourceCodester School Registration and Fee System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90519", "detail": "EXPLOIT PUBLISHED — CVE-2026-90519 (PHPGurukul Bank Locker Management System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90524", "detail": "EXPLOIT PUBLISHED — CVE-2026-90524 (jaychouchannel Tourism-Management-System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90533", "detail": "EXPLOIT PUBLISHED — CVE-2026-90533 (FlowiseAI Flowise). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90534", "detail": "EXPLOIT PUBLISHED — CVE-2026-90534 (FlowiseAI Flowise). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90535", "detail": "EXPLOIT PUBLISHED — CVE-2026-90535 (FlowiseAI Flowise). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90572", "detail": "EXPLOIT PUBLISHED — CVE-2026-90572 (davenardella snap7). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90577", "detail": "EXPLOIT PUBLISHED — CVE-2026-90577 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90578", "detail": "EXPLOIT PUBLISHED — CVE-2026-90578 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90580", "detail": "EXPLOIT PUBLISHED — CVE-2026-90580 (FlowiseAI Flowise). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90582", "detail": "EXPLOIT PUBLISHED — CVE-2026-90582 (evanchiu serverless-todo). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90595", "detail": "EXPLOIT PUBLISHED — CVE-2026-90595 (wxiaoqi Spring-Cloud-Platform). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90600", "detail": "EXPLOIT PUBLISHED — CVE-2026-90600 (itsourcecode Sales and Inventory System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90605", "detail": "EXPLOIT PUBLISHED — CVE-2026-90605 (Totolink A3002MU). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90606", "detail": "EXPLOIT PUBLISHED — CVE-2026-90606 (Totolink A3002MU). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90610", "detail": "EXPLOIT PUBLISHED — CVE-2026-90610 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90611", "detail": "EXPLOIT PUBLISHED — CVE-2026-90611 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90615", "detail": "EXPLOIT PUBLISHED — CVE-2026-90615 (SourceCodester Class and Exam Timetabling System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90617", "detail": "EXPLOIT PUBLISHED — CVE-2026-90617 (GH05TCREW PentestAgent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90621", "detail": "EXPLOIT PUBLISHED — CVE-2026-90621 (ipa-lab HackingBuddyGPT). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90622", "detail": "EXPLOIT PUBLISHED — CVE-2026-90622 (GNU libredwg). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90682", "detail": "EXPLOIT PUBLISHED — CVE-2026-90682 (Matthias-Wandel jhead). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90683", "detail": "EXPLOIT PUBLISHED — CVE-2026-90683 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90687", "detail": "EXPLOIT PUBLISHED — CVE-2026-90687 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90697", "detail": "EXPLOIT PUBLISHED — CVE-2026-90697 (SourceCodester Inventory Management System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90698", "detail": "EXPLOIT PUBLISHED — CVE-2026-90698 (memcached). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90702", "detail": "EXPLOIT PUBLISHED — CVE-2026-90702 (D-Link DWR-M921). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90703", "detail": "EXPLOIT PUBLISHED — CVE-2026-90703 (D-Link DWR-M921). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90708", "detail": "EXPLOIT PUBLISHED — CVE-2026-90708 (Yot CMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90713", "detail": "EXPLOIT PUBLISHED — CVE-2026-90713 (vllm-project vLLM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90714", "detail": "EXPLOIT PUBLISHED — CVE-2026-90714 (marcobambini Gravity). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90785", "detail": "EXPLOIT PUBLISHED — CVE-2026-90785 (Dvidelabs flatcc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90786", "detail": "EXPLOIT PUBLISHED — CVE-2026-90786 (Dvidelabs flatcc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-9079", "detail": "EXPLOIT PUBLISHED — CVE-2026-9079 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90791", "detail": "EXPLOIT PUBLISHED — CVE-2026-90791 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90795", "detail": "EXPLOIT PUBLISHED — CVE-2026-90795 (itsourcecode Loan Management System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90796", "detail": "EXPLOIT PUBLISHED — CVE-2026-90796 (itsourcecode Leave Management System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-9080", "detail": "EXPLOIT PUBLISHED — CVE-2026-9080 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90804", "detail": "EXPLOIT PUBLISHED — CVE-2026-90804 (GNU Binutils). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90805", "detail": "EXPLOIT PUBLISHED — CVE-2026-90805 (subhajitkhan online-clinic-management-system). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90810", "detail": "EXPLOIT PUBLISHED — CVE-2026-90810 (cosmicstack-labs mercury-agent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90814", "detail": "EXPLOIT PUBLISHED — CVE-2026-90814 (cosmicstack-labs mercury-agent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90815", "detail": "EXPLOIT PUBLISHED — CVE-2026-90815 (FFmpeg). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90824", "detail": "EXPLOIT PUBLISHED — CVE-2026-90824 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90825", "detail": "EXPLOIT PUBLISHED — CVE-2026-90825 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90827", "detail": "EXPLOIT PUBLISHED — CVE-2026-90827 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90828", "detail": "EXPLOIT PUBLISHED — CVE-2026-90828 (GNU Binutils). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90829", "detail": "EXPLOIT PUBLISHED — CVE-2026-90829 (GNU Binutils). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90830", "detail": "EXPLOIT PUBLISHED — CVE-2026-90830 (GNU Binutils). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90835", "detail": "EXPLOIT PUBLISHED — CVE-2026-90835 (michaelliao itranswarp). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-91143", "detail": "EXPLOIT PUBLISHED — CVE-2026-91143 (snail007 goproxy). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-9545", "detail": "EXPLOIT PUBLISHED — CVE-2026-9545 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-9546", "detail": "EXPLOIT PUBLISHED — CVE-2026-9546 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-9547", "detail": "EXPLOIT PUBLISHED — CVE-2026-9547 (curl). Public exploit reference added." }, { "type": "DUE_DATE_PASSED", "cve_id": "CVE-2026-81578", "detail": "DUE DATE PASSED — CVE-2026-81578 (PaperCut MF/NG). CISA remediation deadline was September 14, 2026; still in catalog." }, { "type": "DUE_DATE_PASSED", "cve_id": "CVE-2026-82078", "detail": "DUE DATE PASSED — CVE-2026-82078 (PaperCut MF/NG). CISA remediation deadline was September 14, 2026; still in catalog." }, { "type": "DUE_DATE_PASSED", "cve_id": "CVE-2026-84869", "detail": "DUE DATE PASSED — CVE-2026-84869 (ConnectWise ScreenConnect). CISA remediation deadline was September 14, 2026; still in catalog." }, { "type": "DUE_DATE_PASSED", "cve_id": "CVE-2026-85706", "detail": "DUE DATE PASSED — CVE-2026-85706 (GitLab). CISA remediation deadline was September 14, 2026; still in catalog." }, { "type": "RESCORED", "cve_id": "CVE-2023-5578", "detail": "RESCORED — CVE-2023-5578 (Portábilis i-Educar). CVSS 5.1 → 2 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-10012", "detail": "RESCORED — CVE-2025-10012 (Portabilis i-Educar). CVSS 5.3 → 2.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-8538", "detail": "RESCORED — CVE-2025-8538 (Portabilis i-Educar). CVSS 4.8 → 1.9 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-8539", "detail": "RESCORED — CVE-2025-8539 (Portabilis i-Educar). CVSS 4.8 → 1.9 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-9236", "detail": "RESCORED — CVE-2025-9236 (Portabilis i-Educar). CVSS 5.3 → 2.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-9531", "detail": "RESCORED — CVE-2025-9531 (Portabilis i-Educar). CVSS 5.3 → 2.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-9606", "detail": "RESCORED — CVE-2025-9606 (Portabilis i-Educar). CVSS 5.3 → 2.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-14199", "detail": "RESCORED — CVE-2026-14199 (Grafana Enterprise). CVSS 7.1 → 8.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-2015", "detail": "RESCORED — CVE-2026-2015 (Portabilis i-Educar). CVSS 5.3 → 2.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-3416", "detail": "RESCORED — CVE-2026-3416 (WSO2 API Manager). CVSS 5.9 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-66014", "detail": "RESCORED — CVE-2026-66014 (jfrog artifactory). CVSS 9.8 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-75050", "detail": "RESCORED — CVE-2026-75050 (JetBrains YouTrack). CVSS 7.1 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-77822", "detail": "RESCORED — CVE-2026-77822 (IBM ContextForge MCP Gateway). CVSS 8.2 → 9.6 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-79418", "detail": "RESCORED — CVE-2026-79418. CVSS 5.4 → 8.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-81381", "detail": "RESCORED — CVE-2026-81381 (Microsoft Visual Studio Code). CVSS 6.5 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84933", "detail": "RESCORED — CVE-2026-84933 (undici). CVSS 6.5 → 8.2 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84947", "detail": "RESCORED — CVE-2026-84947 (undici). CVSS 3.7 → 5.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84961", "detail": "RESCORED — CVE-2026-84961 (undici). CVSS 7.4 → 9.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-85008", "detail": "RESCORED — CVE-2026-85008 (undici). CVSS 3.7 → 5.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-85014", "detail": "RESCORED — CVE-2026-85014 (undici). CVSS 5.9 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-86137", "detail": "RESCORED — CVE-2026-86137 (xmlsoft libxml2). CVSS 2.9 → 6.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-86138", "detail": "RESCORED — CVE-2026-86138 (xmlsoft libxml2). CVSS 6.9 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-86139", "detail": "RESCORED — CVE-2026-86139 (xmlsoft libxml2). CVSS 6.9 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-86140", "detail": "RESCORED — CVE-2026-86140 (xmlsoft libxml2). CVSS 8 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-86141", "detail": "RESCORED — CVE-2026-86141 (xmlsoft libxml2). CVSS 2.9 → 3.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-86142", "detail": "RESCORED — CVE-2026-86142 (xmlsoft libxml2). CVSS 6.9 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-86143", "detail": "RESCORED — CVE-2026-86143 (xmlsoft libxml2). CVSS 6.9 → 7.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-86144", "detail": "RESCORED — CVE-2026-86144 (xmlsoft libxml2). CVSS 5.6 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-90840", "detail": "RESCORED — CVE-2026-90840 (PHPGurukul Blood Donor Management System). CVSS 6.9 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-90841", "detail": "RESCORED — CVE-2026-90841 (PHPGurukul Blood Donor Management System). CVSS 6.9 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-90842", "detail": "RESCORED — CVE-2026-90842 (PHPGurukul Blood Donor Management System). CVSS 6.3 → 2.9 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-9176", "detail": "RESCORED — CVE-2026-9176 (IBM WebSphere Application Server). CVSS 6.7 → 7.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-9327", "detail": "RESCORED — CVE-2026-9327 (IBM WebSphere Application Server). CVSS 6.3 → 8.1 (NVD)." }, { "type": "REJECTED", "cve_id": "CVE-2026-71269", "detail": "REJECTED — CVE-2026-71269 (node-red). Record withdrawn by the CNA." }, { "type": "REJECTED", "cve_id": "CVE-2026-75501", "detail": "REJECTED — CVE-2026-75501 (Calix GS7 XGS (GS5239XG)). Record withdrawn by the CNA." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-75092", "detail": "PATCH SHIPPED — CVE-2026-75092 (Red Hat Enterprise Linux 9). Fixed in Red Hat Enterprise Linux 9 0:0.24.0-1.el9_8.1." } ], "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/." }