CVE-2026-60590

Oracle Hospitality Simphony POS (versions 19.8–19.10.1) has a HIGH-severity (CVSS 7.5) vulnerability: an unauthenticated remote attacker via HTTP can access critical or all accessible data. No root cause or patch details are provided. Monitor Oracle's August 2026 CPU advisory for fixes.