CVE-2026-83477

Oracle E-Business Suite (component: Work in Process – Workbenches ) is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with access to the adjacent network segment can compromise the product with low complexity and no user ...

EUVD-2026-79718

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...

CVE-2026-83278

Oracle Helidon (part of Oracle Fusion Middleware), specifically the helidon-integrations-neo4j component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . The vulnerability requires an unauthenticated attacker with access to the physical communication segment (adjacent network) and is rated...

CVE-2026-83244

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a difficult-to-exploit vulnerability exploitable by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the product exec...

CVE-2026-83170

Oracle One-to-One Fulfillment (component: Documents) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 , is affected by an easily exploitable vulnerability. A low-privileged attacker with access to the adjacent physical communication segment can compromise the component, resulting in f...

CVE-2026-83155

Oracle Siebel CRM (component: Server Infrastructure , product: Siebel CRM Deployment) versions 17.0–26.7 are affected by an easily exploitable vulnerability. A low-privileged attacker with access to the adjacent physical network segment can compromise the deployment, resulting in high confidentia...

CVE-2026-83085

This vulnerability affects Oracle Siebel CRM (component: Siebel Cloud Manager ), impacting supported versions 22.3 through 26.7 . The attack vector is adjacent network (AV:A) with low privileges and no user interaction, requiring an attacker to be on the same physical communication segment. Due t...

CVE-2026-83081

Oracle Banking Corporate Lending (component: Core ) of Oracle Financial Services Applications, versions 14.5.0.0.0 through 14.9.0.0.0 , is affected by a vulnerability scored CVSS 3.1 Base 8.0 (HIGH) . An unauthenticated attacker with access to the physical communication segment attached to the ha...

CVE-2026-83073

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ) versions 22.3 through 26.7 are affected by a vulnerability allowing an unauthenticated attacker with access to the adjacent physical communication segment to compromise the application. The attack requires low complexity and ...

EUVD-2026-79401

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

EUVD-2026-79393

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-83027

Oracle Identity Manager Connector (component: Core) within Oracle Fusion Middleware is affected by a critical vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this with low complexity...

CVE-2026-83022

Oracle WebCenter Enterprise Capture (component: Client Bundle ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the physical communication segment to compromise the product. S...

EUVD-2026-79350

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication...

EUVD-2026-79233

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

CVE-2026-76707

HPE Networking EdgeConnect SD-WAN Gateways are affected by an unauthenticated information disclosure vulnerability that allows an adjacent attacker to view some system memory contents. Successful exploitation could reveal insights into internal services and workflows , increasing the risk of unau...

CVE-2026-76699

CVE-2026-76699 is a buffer overflow in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . An unauthenticated adjacent attacker with high attack complexity can crash the service, causing temporary disruption to network operations. The CVSS 3.1 s...

EUVD-2026-79225

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...

EUVD-2026-79222

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting networ...

CVE-2026-76692

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways allows an unauthenticated adjacent attacker to obtain uninitialized stack memory from the gateway and disrupt normal service operation. Successful exploitation results in either information disclosure (limited memory contents) or denia...