CVE-2026-87260

Oracle Agile Engineering Data Management (Oracle Supply Chain), component Engineering Communication Interface , version 6.2.1 is affected by an easily exploitable vulnerability (CVSS 3.1: 7.3 HIGH ). An attacker with low privileges and access to the physical communication segment attached to the ...

CVE-2026-87252

CVE-2026-87252 affects Oracle Agile PLM (Oracle Supply Chain, component: Application Server ), version 9.3.6 . The vulnerability allows an unauthenticated attacker with access to the physical communication segment attached to the hardware where Agile PLM executes to compromise the application. It...

CVE-2026-87245

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in the Security component. An attacker with low privileges and access to the adjacent physical communication segment can exploit this with low complexity and no user interaction to achieve full takeover (hig...

EUVD-2026-79900

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the...

CVE-2026-87243

Oracle Hyperion Financial Management (component: Security, version 11.2.26.0.000 ) is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the product. The vulnerability carries a scope ch...

CVE-2026-87241

A security vulnerability in Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) allows an unauthenticated attacker with access to the physical communication segment to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or m...

CVE-2026-87218

CVE-2026-87218 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000). An unauthenticated attacker with adjacent network access (physical communication segment) can exploit this with low complexity and no user interaction. Successful exploitation allows una...

CVE-2026-87210

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability allowing an unauthenticated attacker with access to the physical communication segment where the product executes to compromise it. Successful exploitation can r...

CVE-2026-87187

Oracle Hyperion Financial Management (component: Security ) in version 11.2.26.0.000 is affected by an easily exploitable vulnerability. An unauthenticated attacker with access to the adjacent physical communication segment where the product executes can compromise the system, resulting in a full...

CVE-2026-87186

Oracle Hyperion Financial Management (component: Security ) in supported version 11.2.26.0.000 is affected by a critical vulnerability (CVSS 3.1: 9.6 ). An unauthenticated attacker with access to the physical communication segment (adjacent network) can exploit this with low complexity and no use...

EUVD-2026-79841

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-83491

Oracle iRecruitment (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the product. The attack vector is adjace...

CVE-2026-83477

Oracle E-Business Suite (component: Work in Process – Workbenches ) is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with access to the adjacent network segment can compromise the product with low complexity and no user ...

EUVD-2026-79762

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

EUVD-2026-79718

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...

CVE-2026-83278

Oracle Helidon (part of Oracle Fusion Middleware), specifically the helidon-integrations-neo4j component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . The vulnerability requires an unauthenticated attacker with access to the physical communication segment (adjacent network) and is rated...

CVE-2026-83244

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a difficult-to-exploit vulnerability exploitable by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the product exec...

EUVD-2026-79497

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the...

CVE-2026-83170

Oracle One-to-One Fulfillment (component: Documents) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by an easily exploitable vulnerability. A low-privileged attacker with access to the adjacent physical communication segment can compromise the component, resulting in f...

CVE-2026-83155

Oracle Siebel CRM (component: Server Infrastructure , product: Siebel CRM Deployment) versions 17.0–26.7 are affected by an easily exploitable vulnerability. A low-privileged attacker with access to the adjacent physical network segment can compromise the deployment, resulting in high confidentia...