EUVD-2026-79927

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87275

Oracle VM VirtualBox (Oracle Virtualization), component Core , version 7.2.16 is affected by a vulnerability rated CVSS 3.1 4.6 (Medium) . A high-privileged local attacker with logon to the infrastructure can exploit it with low complexity, resulting in unauthorized read access to a subset of Vir...

CVE-2026-87275

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87169

Oracle Contract Lifecycle Management for Public Sector (a module of Oracle E-Business Suite) has a vulnerability in the Wage Determination Online component affecting versions 12.2.3 through 12.2.15 . The flaw is easily exploitable by an unauthenticated attacker with network access via HTTP , thou...

CVE-2026-83431

Oracle Product Workbench (component: WebUI ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a medium-severity vulnerability (CVSS 3.1: 5.4 ). A low-privileged attacker with network access via HTTP can exploit the flaw, but user interaction from a third party is required...

CVE-2026-83419

Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized read access to a s...

EUVD-2026-79603

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracl...

EUVD-2026-79600

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83230

This vulnerability affects Oracle Siebel CRM (component: Siebel Management Console ) in supported versions 17.0 through 26.7 . An easily exploitable, low-privileged attacker with network access via HTTP can compromise the Siebel CRM Deployment component. Successful exploitation results in unautho...

CVE-2026-83077

CVE-2026-83077 affects the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications , versions 22.3 through 26.7 . The vulnerability is exploitable over network access via HTTP by a low-privileged attacker without user interaction. The scope is changed , meaning attacks originating ...

PT-2026-92774

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracl...

PT-2026-92628

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Hotspot. The supported versions affected by this vulnerability are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:...

EUVD-2026-76546

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN overflow in symlinkdata error context loop The check added by commit 7d9a7f1f96cd "smb/client: fix possible infinite loop and oob read in symlinkdata" compared the post-ALIGN length against the remaining...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022285 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 a...

EUVD-2026-71876

The Video Player for YouTube WordPress plugin before 2.1.0 does not properly sanitise and escape user-supplied input before using it in a SQL statement, allowing users with the Contributor role and above to perform SQL injection attacks and read arbitrary data from the database...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106166 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server:...

SUSE-SU-2026:23610-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20.1+1 August 2026 CSPU. - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to a subset of accessible data bsc1275777. - CVE-2026-61308...

TencentOS Server 2: java-1.8.0-openjdk (TSSA-2026:0938)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0938 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2026-82871

ToolJet versions before v3.16.208 fail to validate organization membership in database read routes. Any authenticated user can supply arbitrary organization IDs in URL parameters to list tables, retrieve column definitions, and execute join queries to read stored data from victim organizations. T...