CVE-2026-101800

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to...

CVE-2026-101792

A vulnerability exists in the Security component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attac...

CVE-2026-101785

A vulnerability exists in the JSON component of MySQL Server and MySQL Cluster products from Oracle MySQL. Affected versions include MySQL Server 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 , as well as MySQL Cluster 8.0.0-8.0.49 , 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 . A low-privile...

CVE-2026-101785

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

CVE-2026-101783

The MySQL Router product from Oracle MySQL (specifically component Router: General ) is affected by a vulnerability in version 26.7.0 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the MySQL Router. Successful exploitation may lead to ...

CVE-2026-101774

A vulnerability in the Server: Pluggable Auth component of MySQL Server and MySQL Cluster products from Oracle MySQL allows an unauthenticated attacker with network access via multiple protocols to compromise the systems. The flaw is difficult to exploit but can result in a complete Denial of Ser...

CVE-2026-101774

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to explo...

CVE-2026-101775

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit...

CVE-2026-101773

A vulnerability exists in the Server: Group Replication Plugin of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1). An unauthenticated attacker with ac...

CVE-2026-101773

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily...

CVE-2026-101769

A difficult to exploit vulnerability exists in the MySQL Cluster product of Oracle MySQL (component: Cluster: General), affecting supported versions 26.7.0-26.7.1 . An unauthenticated attacker with network access via TCP can compromise the system, potentially leading to a complete Denial of Servi...

CVE-2026-101714

A vulnerability exists in the Web Client component of Oracle Agile PLM (version 9.3.6). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, provided there is human interaction from a user other than the attacker. Successful exploitation may le...

CVE-2026-101707

A vulnerability exists in the Oracle Concurrent Processing product within Oracle E-Business Suite (specifically versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to compromise the product. Successful exploitati...

CVE-2026-101697

A vulnerability exists in the Admin Console UI component of the Oracle One-to-One Fulfillment product within Oracle E-Business Suite, affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, though the attack req...

CVE-2026-101695

A vulnerability exists in the Documents component of the Oracle One-to-One Fulfillment product within Oracle E-Business Suite , affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product....

CVE-2026-101688

A vulnerability exists in the SOA Provider component of the Oracle E-Business Suite Integrated SOA Gateway (versions 12.2.3-12.2.15 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the gateway. A successful attack could result in unauth...

CVE-2026-101671

A vulnerability exists in the Oracle Email Center product of Oracle E-Business Suite (specifically the Message Component ) in supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can compromise the product, provided they can induce human interaction from a ...

CVE-2026-101668

A vulnerability exists in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Su...

CVE-2026-101662

The Oracle Mobile Field Service product (component: Admin UI ) is vulnerable in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the service. Successful exploitation may result in unauthorized creation, deletio...

CVE-2026-101660

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the service. Successf...