CVE-2026-66257

The CVE-2026-66257 entry applies to Apache Qpid Proton-J up to version 0.34.1. The root cause is unbounded symbol value caching, which allows a pre-authentication attacker to exhaust resources and cause denial of service. The available sources consistently report the impact as resource exhaustion...

CVE-2026-18682

A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api/upload of the component File Upload API. The manipulation of the argument File results in cross site scripting. The attack may be performed from remote. A high complexity level...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @abelfubu/schematics (0.1.1) +688 more potentially affected by CVE-2026-54753 via nx (>=17.0.4, <=22.7.1)

nx NPM version =17.0.4, =2.2.1, =0.0.1, =0.1.5, =0.0.3, =0.0.4, =0.0.47, =0.0.1, =1.0.0, =1.0.0, =1.0.1 - @aloes/nx-heroku 0.4.1 - @altariotechnologieslisbon/query-resolver 0.14.2 and more Source cves: CVE-2026-54753 Source advisory: OSV:GHSA-G2R8-WVMJ-JF5W...

PT-2026-66332

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Exploit for CVE-2026-52832

CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard...

Astra Linux – Vulnerability in Chromium

The use of after-free in ServiceWorkers in Google Chrome before version 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

CVE-2026-65595 n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange

n8n before 2.30.1 and 2.29.8 assigns all Public API key scopes to JWTs issued through the Token Exchange module regardless of the acting user's role. On instances where the Token Exchange feature and Public API are enabled, a low-privileged user who can obtain a valid external JWT trusted by a...

EUVD-2026-47232

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Rest Service. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Data Integrator...

EUVD-2026-46921

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-46908

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Integration Business Insight. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-46846

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-46808

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where TimesTen...

EUVD-2026-46792

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service...

EUVD-2026-46764

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle JDeveloper executes to...

EUVD-2026-46722

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-46659

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful...

PT-2026-63520

Name of the Vulnerable Software and Affected Versions Oracle Platform Security for Java version 12.2.1.4.0 Oracle Platform Security for Java version 14.1.2.0.0 Description A flaw in the Centralized Thirdparty Jars component of Oracle Fusion Middleware allows a low privileged attacker with network...

PT-2026-63524

Name of the Vulnerable Software and Affected Versions Oracle Platform Security for Java version 12.2.1.4.0 Oracle Platform Security for Java version 14.1.2.0.0 Description An issue exists in the Centralized Thirdparty Jars component of Oracle Platform Security for Java. A low privileged attacker...

CVE-2026-60527

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebLogic Server...

CVE-2026-60410

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise TimesTen...