CVE-2026-73942

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

CVE-2026-73940

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Orac...

CVE-2026-70757

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2026-70756

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

Exploit for Improper Authentication in Jfrog Artifactory

CVE‑2026‑82329 – JFrog Artifactory Auth B...

CVE-2026-81926 Concrete CMS 9.4.0 through 9.5.2 is vulnerable to Cross-site scripting in the location panel duplicate-path confirmation dialog

Concrete CMS 9.4.0 through 9.5.2 did not escape colliding page paths before rendering them in the location panel's duplicate-path confirmation dialog. The panel's check endpoint returned the submitted path unmodified in its JSON response, and client-side JavaScript inserted each value into the...

EUVD-2026-79929

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this...

CVE-2026-87270

Oracle VM VirtualBox version 7.2.16 (component: Core , Windows host only ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to achieve full takeover of the VirtualBox environment. The attack requires local access, has low complexity, and no user interac...

CVE-2026-87259

CVE-2026-87259 affects the Engineering Communication Interface component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . A low-privileged attacker with local logon access can exploit this vulnerability to achieve high confidentiality and integrity impacts , incl...

CVE-2026-87252

CVE-2026-87252 affects Oracle Agile PLM (Oracle Supply Chain, component: Application Server ), version 9.3.6 . The vulnerability allows an unauthenticated attacker with access to the physical communication segment attached to the hardware where Agile PLM executes to compromise the application. It...

EUVD-2026-79892

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79889

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79885

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87231

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected in the Security component. An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve full takeover of the product (high confidentiality, integrity, and availability...

EUVD-2026-79884

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79882

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87221

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data. The impact is limited to con...

EUVD-2026-79876

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87219

This vulnerability affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with local access to the infrastructure can exploit it without user interaction to gain unauthorized creation, deletion, modification, or read access to crit...

CVE-2026-87217

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is vulnerable to an easily exploitable, unauthenticated network attack via HTTP . A successful attack allows the attacker to create, delete, or modify critical data and gain unauthorized access to all data access...