CVE-2026-101612

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability...

CVE-2026-101611

A vulnerability exists in the InnoDB component of Oracle MySQL (affecting MySQL Server and MySQL Cluster ). The issue impacts MySQL Server versions 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 , as well as MySQL Cluster versions 8.0.0-8.0.49 , 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 . A ...

CVE-2026-101609

A vulnerability exists in the InnoDB component of Oracle MySQL MySQL Server and MySQL Cluster products. Affected versions include MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1; and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. A high privileged attacker wit...

CVE-2026-101599

A vulnerability exists in the Core component of Oracle VM VirtualBox affecting version 7.2.20 . This high-complexity vulnerability allows a low-privileged attacker with local access to the infrastructure to compromise the software, potentially leading to a takeover of Oracle VM VirtualBox. Succes...

CVE-2026-101591

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is affected by a vulnerability in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset...

CVE-2026-101560

The Oracle Commerce Platform (component: Dynamo Commerce Server ) is affected by a vulnerability in version 11.4.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful exploitation may lead to unauthorized creation, deletion,...

CVE-2026-101533

A vulnerability exists in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues) affecting versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise and potential...

CVE-2026-101532

The Oracle EDI Gateway product within Oracle E-Business Suite (specifically the All Miscellaneous EDI Issues component) is affected by a vulnerability in versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potent...

CVE-2026-101519

The Oracle EDI Gateway product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ) is susceptible to a high-severity vulnerability in the All Miscellaneous EDI Issues component. A high-privileged attacker with network access via HTTP can exploit this issue to compromise the gateway, potenti...

CVE-2026-101511

A vulnerability exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) affecting versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the platform, potentially leading to una...

CVE-2026-101510

The Oracle Net Services component of Oracle Database Server is vulnerable in versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A high-privileged attacker with local access can exploit this vulnerability to compromise Oracle Net Services, potentially resulting in a hang or a frequently repea...

CVE-2026-101500

A vulnerability exists in the Oracle Global Lifecycle Management OPatchAuto product (component: Database extensions ), specifically affecting supported versions 12.2.0.1.16-12.2.0.1.52 . A high-privileged attacker with access to the infrastructure where OPatchAuto executes can compromise the prod...

CVE-2026-101466

The Oracle EDI Gateway product within Oracle E-Business Suite (component: All Miscellaneous EDI Issues ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A high privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle EDI Gateway, potential...

CVE-2026-101459

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the deployment. Successful exploitation may r...

CVE-2026-101442

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult to exploit vulnerability to achieve unauthorized read access to a subset of access...

CVE-2026-101437

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the applications, potentially impacting additional ...

CVE-2026-101426

Oracle PeopleSoft PeopleTools (component: SQR ) versions 8.61-8.63 are affected by a difficult-to-exploit vulnerability. A high-privileged attacker with logon access to the infrastructure can compromise the software, provided they can elicit human interaction from another person. This vulnerabili...

CVE-2026-101397

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) affecting supported versions 17.0-26.9 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product, potentially resulting in...

CVE-2026-101377

A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting supported versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can exploit this issue to compromise the service. Successful exploitation may lead to a partial denial of service...

CVE-2026-101366

A vulnerability exists in the Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation results in unauthorized read access to a su...