CVE-2026-91374

A flaw was found in the Serviceability component of OpenJDK. An unauthenticated remote attacker can exploit this issue across the network by supplying crafted data to exposed application programming interfaces APIs or by running untrusted code within a sandboxed Java environment. Successful...

CVE-2026-91332

A flaw was found in OpenJDK's Networking component. An unauthenticated remote attacker with network access can exploit this vulnerability by sending crafted input to exposed networking Application Programming Interfaces APIs. Successful exploitation allows the attacker to perform unauthorized dat...

CVE-2026-91395

A flaw was found in the Utility component of Java SE and GraalVM. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to exposed application programming interfaces APIs. A successful attack allows unauthorized modification or deletion...

CVE-2026-91396

A flaw was found in the Utility component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by supplying untrusted data to component APIs over the network. A successful attack can allow unauthorized modification or deletion of accessible data and cause a partial Denial...

CVE-2026-91379

A flaw was found in OpenJDK's JDK tools component. An unauthenticated local attacker can exploit this vulnerability by convincing a user to interact with untrusted code in an environment relying on the Java security sandbox. A successful attack can result in unauthorized creation, modification, o...

php: PHP: Archive entry injection via integer overflow in TAR parser

A flaw was found in PHP. An integer overflow vulnerability in the Phar extension occurs when parsing TAR archive headers containing excessively large size fields. An attacker can exploit this issue by supplying a specially crafted archive file to an application that processes TAR archives, causin...

CVE-2026-91461

A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...

CVE-2026-91453

A flaw was found in OpenJDK's Lightweight HTTP Server. An unauthenticated remote attacker can exploit this vulnerability over the network by sending crafted requests to exposed server Application Programming Interfaces APIs. Successful exploitation allows an attacker to perform unauthorized data...

CVE-2026-91452

A flaw was found in the Networking component of Oracle Java SE and GraalVM. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted data across the network to exposed application programming interfaces APIs, such as through a web service. A successful attack can...

CVE-2026-91411

A flaw was found in the Java Generic Security Services JGSS component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted requests to applications or services utilizing JGSS APIs. A successful attack can cause the application to hang or...

CVE-2026-91462

A flaw was found in the Java Generic Security Services JGSS component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted requests to exposed application programming interfaces APIs, such as through a web service. A successful attack...

CVE-2026-91451

A flaw was found in the Networking component of OpenJDK. This vulnerability allows an unauthenticated remote attacker to cause unauthorized data modification by sending crafted input to exposed Application Programming Interfaces APIs, such as through web services. Successful exploitation enables ...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified new vulnerabilities in Oracle PeopleSoft Enterprise. These vulnerabilities relate to various security risks, including unauthorized access to data, unauthorized modification of data, and disruption of system availability denial-of-service attacks. Depending on the specific...

EUVD-2026-106811

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106812

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106748

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Porting. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...

EUVD-2026-106733

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Generic REST. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-106734

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: LDAP Gateway. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-106729

Vulnerability in Oracle Java SE component: Java plugin. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Whi...

EUVD-2026-106719

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft component: eProcurement. The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to...