UBUNTU-CVE-2026-47027

Vulnerability in Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability...

UBUNTU-CVE-2026-56746

Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, are vulnerable to security control bypass during the origin evaluation process. CorsHandler provides a shortCircuit...

CVE-2026-63944

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, allows an attacker to access memory after it has been freed. This can lead to a system crash, resulting in a Denial of Service DoS, or potentially enable an attacker to execute malicious code. Th...

CVE-2026-47040

creationtimestamp| type| source ---|---|--- 2026-07-21 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6t6j27mf2v 2026-07-23 16:46:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-16421

Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Gitea: Private org member list leaked via /members API endpoint — incomplete fix for PR #38145

Summary PR 38145 fixed ListPublicMembers and IsPublicMember but missed ListMembers. Any authenticated user can enumerate ALL members not just public ones of a private organization. Affected Versions = v1.26.4 latest and main branch Root Cause routers/api/v1/org/member.go — ListMembers: // Missing...

EUVD-2026-41621

Gitea: Unauthorized Access to Labels of Private Organizations...

CVE-2026-62567

Oracle HRMS (UK) in Oracle E-Business Suite (UK Payroll) is affected on versions 12.2.3–12.2.15. The issue is exploitable with network access via HTTP by a low-privileged user, potentially leading to unauthorized access to critical data across Oracle HRMS (UK) and potentially other products (scop...

CVE-2026-62563

...

CVE-2026-62565

CVE-2026-62565 affects Oracle HRMS (US) within Oracle E-Business Suite, US Payroll Year End, for versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized access to confidential data and unauthorized up...

CVE-2026-62562

...

CVE-2026-62559

...

CVE-2026-62556

The CVE-2026-62556 affects Oracle HRMS (US) within Oracle E-Business Suite, specifically the Internal Operations component, for versions 12.2.6–12.2.15. The vulnerability can be exploited by a low-privileged attacker over HTTP with network access, potentially granting unauthorized access to Oracl...

CVE-2026-62548

...

CVE-2026-62547

CVE-2026-62547 is a vulnerability in Oracle E-Business Suite’s Oracle Workflow product, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker with network access via SMTP and can lead to takeover of Oracle Work...

CVE-2026-62542

CVE-2026-62542 affects Oracle E-Business Suite, Oracle Advanced Benefits (Self Service Benefits) with vulnerable versions 12.2.3–12.2.15. The vulnerability allows a network-based, low-privilege attacker over HTTP to read, update/insert/delete data and cause partial denial of service in Oracle Adv...

CVE-2026-62546

...

CVE-2026-62530

Technical details about CVE-2026-62530 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-62528

CVE-2026-62528 affects Oracle E-Business Suite’s Oracle HCM Configuration Workbench (Install) with affected versions 12.2.3–12.2.15. A low-privilege, unauthenticated/ network-accessible attacker (via HTTP) can exploit this vulnerability to achieve unauthorized update/insert/delete access and read...

CVE-2026-62524

The CVE-2026-62524 vulnerability affects Oracle HRMS (US) within Oracle E-Business Suite (US Payroll - General), affecting 12.2.3–12.2.15. The issue allows a low-privileged, network-attacker (via HTTP) to compromise data: unauthorized update/insert/delete and read access to Oracle HRMS (US) data,...