CVE-2026-83010

This vulnerability affects the Client Bundle component of Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware), specifically versions 12.2.1.4.0 and 14.1.2.0.0 . An attacker with high privileges and network access via HTTP can exploit it, though user interaction from a separate ...

CVE-2026-83009

Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware) contains a vulnerability in the Client Bundle component affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve a...

EUVD-2026-79338

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2026-83008

Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware) contains a vulnerability in the Client Bundle component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this to achieve full takeover of the product, imp...

CVE-2026-83006

Oracle WebCenter Enterprise Capture (component: Client Bundle ), part of Oracle Fusion Middleware, is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. The scope chan...

EUVD-2026-79336

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

EUVD-2026-79335

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-79334

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2026-83007

CVE-2026-83007 affects the Client Bundle component of Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product. Due to a scope ch...

EUVD-2026-79331

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise...

CVE-2026-83004

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware), component Client Bundle , is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows a low-privileged attacker with local logon to compromise the product, with high complexity and required user...

EUVD-2026-79333

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-79332

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracl...

CVE-2026-83005

Oracle WebCenter Enterprise Capture (component: Client Bundle ), part of Oracle Fusion Middleware, is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . The flaw allows a low-privileged attacker with network access via HTTP to compromise the product and achieve takeover , with high impa...

CVE-2026-83003

Oracle WebCenter Enterprise Capture (Oracle Fusion Middleware, component: Client Bundle) versions 12.2.1.4.0 and 14.1.2.0.0 contain a vulnerability exploitable over SOAP by a low-privileged network attacker with no user interaction. The scope change means that while the flaw resides in WebCenter ...

Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin

The CookieJar client middleware decides whether to attach a cookie to an outgoing request using an unanchored substring test on the host and path, instead of the domain match specified by RFC6265 5.1.3. A cookie stored for example.com is therefore sent to any host whose name merely contains...

CVE-2026-84850

Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate...

CVE-2026-84850

Devolutions Server version 2026.2.16 and earlier is vulnerable to improper certificate validation in the shared HTTP client used by synchronization and integration features. This flaw allows a network-positioned attacker to intercept and tamper with outbound TLS connections by utilizing a spoofed...

CVE-2026-84850

Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate...

EUVD-2026-79188

Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate...