CVE-2026-71047

Oracle Identity Manager (component: Core ) in Oracle Fusion Middleware is affected by a vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this to achieve takeover of the product, with high impact on confidentiality, ...

CVE-2026-70915

Oracle Identity Manager (part of Oracle Fusion Middleware, component Core ) is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of the p...

CVE-2026-70757

CVE-2026-70757 is a critical vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware, component: Core) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 . An unauthenticated attacker with network access via T3 or IIOP can compromise the server, resulting in full take...

CVE-2026-87288

Oracle GraalVM (component: Compiler ), part of Oracle Java SE, is affected in supported version 25.0.4.1 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve takeover of Oracle GraalVM, with high impact on confidentiality, integrity, and availability. The...

CVE-2026-76820 OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

CVE-2026-76820

OpenCTI, an open-source cyber threat intelligence platform, is affected by a Server-Side Request Forgery (SSRF) in the synchronizerFetch GraphQL query prior to version 7.260701.0 . The backend's fetchRemoteStreams function validated only the HTTP/HTTPS scheme without applying the ingestion deny l...

CVE-2026-76820 OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

CVE-2026-76820 OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

EUVD-2026-79241

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

CVE-2026-76707

HPE Networking EdgeConnect SD-WAN Gateways are affected by an unauthenticated information disclosure vulnerability that allows an adjacent attacker to view some system memory contents. Successful exploitation could reveal insights into internal services and workflows , increasing the risk of unau...

EUVD-2026-79233

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

CVE-2026-76707 Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

CVE-2026-76699

CVE-2026-76699 is a buffer overflow in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . An unauthenticated adjacent attacker with high attack complexity can crash the service, causing temporary disruption to network operations. The CVSS 3.1 s...

CVE-2026-76699 Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...

EUVD-2026-79225

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...

CVE-2026-76696 Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting networ...

EUVD-2026-79222

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting networ...

CVE-2026-76692

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways allows an unauthenticated adjacent attacker to obtain uninitialized stack memory from the gateway and disrupt normal service operation. Successful exploitation results in either information disclosure (limited memory contents) or denia...

CVE-2026-76682 Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

EUVD-2026-79208

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...