CVE-2026-60620

Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards component: Configuration Management. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-60181

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

CVE-2026-60181

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

CVE-2026-60181

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

arbor-ai (0.2.17), ardupilot-methodic-configurator (>=1.4.3, <=1.4.4) +8 more potentially affected by CVE-2026-59890 via setuptools (79.0.0)

setuptools PYPI version 79.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - arbor-ai 0.2.17 - ardupilot-methodic-configurator =1.4.3, =0.0.1, =1.0.6, =0.1.0, =20250422.0.0.dev0, =20250430.0.0.dev0 -...

ardupilot-methodic-configurator (>=1.2.2, <=1.4.0), autosubmit (4.1.12) +15 more potentially affected by CVE-2026-59890 via setuptools (76.0.0)

setuptools PYPI version 76.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ardupilot-methodic-configurator =1.2.2, =0.0.254, =0.1.4, =0.20250312.0, =0.2.7, =0.3.0 - scancodeio 34.10.0 - snowflake-cli 3.6.0 -...

aird (0.2.0), ardupilot-methodic-configurator (1.4.5) +21 more potentially affected by CVE-2026-59890 via setuptools (80.3.1)

setuptools PYPI version 80.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aird 0.2.0 - ardupilot-methodic-configurator 1.4.5 - cfl-common =8.6.9, =0.27.1, =8.6.9, =20250512.0.0, =1.11.0rc1, =0.0.11, =1.0.2, =1.0.6...

CVE-2026-60620: Improper Input Validation

Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards component: Configuration Management. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

PT-2026-62658

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Configurator version 9.2 Description A flaw in the Configuration Management component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...

PT-2026-62263

Name of the Vulnerable Software and Affected Versions MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 9.7.0 through 9.7.1 Description A flaw in the Server: Configurator component allows a low privileged attacker with access to the infrastructure where the software executes to...

CVE-2026-60181: Improper Access Control

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the...

MySQL 9.7 -- Multiple vulnerabilities

The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 43 of which apply to the MySQL 9.7 series and to the MySQL Router shipped with these ports. The 9.7 branch is affected by every server issue of the 8.4 branch plus twelve additional ones in code paths that only exi...

nm-configurator-0.3.5-2.1 on GA media (moderate)

nm-configurator-0.3.5-2.1 on GA media Announcement ID: openSUSE-SU-2026:11280-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

OPENSUSE-SU-2026:11280-1 nm-configurator-0.3.5-2.1 on GA media

These are all security issues fixed in the nm-configurator-0.3.5-2.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-MA49342 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.4.4-r0, 2.4.4-r1, 2.9.0-r0

Multiple security vulnerabilities affect the newrelic-prometheus-configurator package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63712

Multiple security vulnerabilities affect the newrelic-prometheus-configurator package. These issues are resolved in later releases. See references for individual vulnerability details...

aird (0.2.0), ardupilot-methodic-configurator (1.4.5) +21 more potentially affected by CVE-2026-59890 via setuptools (80.3.1)

setuptools PYPI version 80.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aird 0.2.0 - ardupilot-methodic-configurator 1.4.5 - cfl-common =8.6.9, =0.27.1, =8.6.9, =20250512.0.0, =1.11.0rc1, =0.0.11, =1.0.2, =1.0.6...

MAL-2026-7081 Malicious code in @louisvuitton/configurator-common-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @louisvuitton/configurator-common-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-11568

The Product Configurator for WooCommerce WordPress plugin before 1.7.3 does not perform any authorisation or post-status check before returning WooCommerce product data through a public AJAX action, allowing unauthenticated users to retrieve the data title, price, weight, stock status, and...