CVE-2026-101455

A vulnerability exists in the Integration - Scripting component of Oracle Siebel CRM Development (supported versions 17.0-26.9 ). A low-privileged attacker with infrastructure access can exploit this difficult-to-execute flaw to compromise the system, potentially resulting in unauthorized creatio...

CVE-2026-101438

The Siebel CRM Cloud Applications product by Oracle (specifically the Siebel Cloud Manager component) is affected by a vulnerability in versions 22.3-26.9 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this high-complexity vuln...

CVE-2026-101431

A vulnerability exists in the Test Framework component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this issue, which requires human interaction from another person. The vulnerability allows for a sc...

CVE-2026-101426

Oracle PeopleSoft PeopleTools (component: SQR ) versions 8.61-8.63 are affected by a difficult-to-exploit vulnerability. A high-privileged attacker with logon access to the infrastructure can compromise the software, provided they can elicit human interaction from another person. This vulnerabili...

CVE-2026-101422

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized access to create, delete,...

CVE-2026-101420

The PeopleSoft Enterprise PeopleTools product (specifically the SQR component) is affected by a critical vulnerability in supported versions 8.61-8.63 . This flaw allows a low-privileged attacker with network access via HTTP to compromise the system, potentially resulting in unauthorized creation...

CVE-2026-101362

A vulnerability exists in the Core component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit vulnerability, though it requires human interaction from a person other than the attacker. S...

Oracle E-Business Suite: CVE-2026-87403: Critical Patch Update

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: AD Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise...

Oracle E-Business Suite: CVE-2026-83361: Critical Patch Update

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Oracle E-Business Suite: CVE-2026-101841: Critical Patch Update

Vulnerability in the Global Order Promising product of Oracle E-Business Suite component: Web Service. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Global Order Promising. Whil...

Oracle E-Business Suite: CVE-2026-101831: Critical Patch Update

Vulnerability in the Oracle Quality product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful...

Oracle E-Business Suite: CVE-2026-101812: Critical Patch Update

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle E-Business Suite: CVE-2026-101705: Critical Patch Update

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: Role Summary. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Common...

Oracle E-Business Suite: CVE-2026-101665: Critical Patch Update

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Admin UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service...

Oracle E-Business Suite: CVE-2026-101710: Critical Patch Update

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful...

Oracle E-Business Suite: CVE-2026-101669: Critical Patch Update

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle E-Business Suite: CVE-2026-87408: Critical Patch Update

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

Azul Zulu: CVE-2026-91462: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

PT-2026-119341

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Admin UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service...

PT-2026-117021

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advance nextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6 next csid advance arg...