EUVD-2026-61402

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity...

CVE-2026-55164

Netflix Lemur before 1.9.2 stores admin-set passwords in plaintext: lemur.users.service.update() assigns the password directly to User.password without calling hash_password(), and the model only registers a bcrypt before_insert listener, not before_update. A database or backup compromise exposes...

MobSF's CSRF checks not enforced after Django migration

Summary Django's CsrfViewMiddleware exists only in the deprecated MIDDLEWARECLASSES ignored since Django 2.0. The active MIDDLEWARE tuple does not include it. All authenticated web POST endpoints delete scan, upload, download APK, change password, manage users accept requests without CSRF tokens...

CVE-2026-45128

MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named...

PT-2026-77467

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description An issue in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to...

PT-2026-77487

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-78083

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the BI Platform...

PT-2026-77802

Name of the Vulnerable Software and Affected Versions Oracle Call Center Technology versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized...

PT-2026-77872

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description An issue exists in the Access and security component that allows a low privileged attacker with logon access to the infrastructure where the software executes to...

PT-2026-77470

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description A flaw in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to...

PT-2026-78052

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.32 Oracle Database Server versions 21.3 through 21.23 Oracle Database Server versions 23.4.0 through 23.26.3 Description A flaw exists in the Portable Clusterware component. An unauthenticated...

PT-2026-77893

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description An issue exists in the Access and security component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77410

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the Data Mover component allows a high-privileged attacker with access to the execution infrastructure to compromise the system. Exploitation...

PT-2026-77417

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle Fusion Middleware. An unauthenticated attacker with network access via HTTP can...

PT-2026-77951

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation requires human interaction fr...

PT-2026-78009

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue exists in the Endeca Application Controller component that allows an unauthenticated attacker with network access via HTTP to compromise the...

PT-2026-78116

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.14 Description A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation can lead to a full...

PT-2026-77905

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system...

PT-2026-78048

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 26.1.0.0.0 Description A flaw exists in the Web Service API component of the Oracle BI Publisher product of Oracle Analytics. A low privileged attacker with network access via...

PT-2026-77490

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...