CVE-2026-89040 Tencent Mass Service Engine in Cluster (MSEC) path traversal

Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...

CVE-2026-83001

A vulnerability in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . The flaw is reachable over HTTP by a high-privileged network attacker with low complexity and no user interaction. Successful e...

CVE-2026-83002

Oracle Access Manager (component: Authentication Engine ) in Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve a takeover of Oracle Access Manager. The ...

EUVD-2026-79330

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79329

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-73962

Oracle Access Manager (Oracle Fusion Middleware, component: Authentication Engine ) is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTPS can exploit this vulnerability to compromise the authentication engine. Due to scope change , successful ...

EUVD-2026-79316

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-73958

Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by a vulnerability in supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as diffi...

EUVD-2026-79312

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73950

Oracle Access Manager (part of Oracle Fusion Middleware), specifically the Authentication Engine component, is affected by an easily exploitable vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achiev...

EUVD-2026-79304

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73945

CVE-2026-73945 affects the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of Oracle Access Manager. The vulnerabilit...

CVE-2026-73946

CVE-2026-73946 affects the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction, resulting in full takeover of ...

EUVD-2026-79525

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79524

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79301

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73947

CVE-2026-73947 is a critical vulnerability in the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit it with low complexity to achieve full takeove...

EUVD-2026-79523

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-73944

Oracle Access Manager (Oracle Fusion Middleware, component: Authentication Engine ) versions 12.2.1.4.0 and 14.1.2.1.0 are affected by a critical vulnerability (CVSS 3.1 base score 9.1 ). An unauthenticated attacker with network access via HTTP can create, delete, or modify data and gain complete...

EUVD-2026-79518

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...