CVE-2026-101747

A vulnerability exists in the InnoDB component of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1). A low privileged attacker with network access via m...

CVE-2026-101744

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1) within the Oracle Supply Chain suite. A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to ...

CVE-2026-101743

A vulnerability exists in the Server: GIS component of Oracle MySQL Server and MySQL Cluster products (versions 26.7.0-26.7.1 ). A low-privileged attacker with network access can exploit this via multiple protocols to cause a hang or a frequently repeatable crash , resulting in a complete Denial ...

CVE-2026-101737

A vulnerability exists in the Compiler component of Oracle Java SE: 26.0.2 . An unauthenticated attacker with network access can exploit this via multiple protocols by supplying data to specific APIs, provided that Untrusted Java Web Start applications or Untrusted Java applets are not used (e.g....

CVE-2026-101733

A vulnerability exists in the JSON component of MySQL Server and MySQL Cluster products from Oracle MySQL. Affected versions include MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1, and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. A low privileged attacker with ...

CVE-2026-101731

A vulnerability exists in the Optimizer component of MySQL Server and MySQL Cluster products from Oracle MySQL. The affected versions include MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1, as well as MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. A high priv...

CVE-2026-101732

A vulnerability exists in the Optimizer component of MySQL Server and MySQL Cluster products from Oracle MySQL. Affected versions include MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1, as well as MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. A high privileg...

CVE-2026-101728

A vulnerability exists in the Server: Pluggable Auth component of Oracle MySQL products, specifically affecting MySQL Server versions 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1, as well as MySQL Cluster versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. A low-privileged attack...

CVE-2026-101729

A vulnerability exists in the Server: Replication component of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1). A high privileged attacker with ne...

CVE-2026-101730

A vulnerability exists in the Optimizer component of MySQL Server and MySQL Cluster products from Oracle MySQL. Affected versions include MySQL Server 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 , as well as MySQL Cluster versions 8.0.0-8.0.49 , 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 ....

CVE-2026-101725

A vulnerability exists in the C API component of Oracle MySQL (MySQL Server and MySQL Cluster). Affected versions include MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1, and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1. A low privileged attacker with network acc...

CVE-2026-101726

A vulnerability exists in the C API component of MySQL Server and MySQL Cluster by Oracle MySQL. Affected versions include MySQL Server (8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1). A low privileged attacker with network acc...

CVE-2026-101727

A vulnerability exists in the Server: Replication component of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1). A high-privileged attacker with networ...

CVE-2026-101724

A vulnerability exists in the InnoDB component of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1). A high-privileged attacker with network access ...

CVE-2026-101721

Oracle MySQL MySQL Server and MySQL Cluster products are affected by a vulnerability in the Server: Components Services component. The flaw allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash , resulting in a complete denia...

CVE-2026-101695

A vulnerability exists in the Documents component of the Oracle One-to-One Fulfillment product within Oracle E-Business Suite , affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product....

CVE-2026-101684

The Oracle E-Business Suite Integrated SOA Gateway (component: Internal Operations ) is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the gateway. Successful exploitation may...

CVE-2026-101678

The Oracle MySQL Connectors product is affected by a vulnerability in the Connector/J component, specifically in version 26.7.0 . This vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service (partial DOS) . Exploitation is c...

CVE-2026-101679

A vulnerability exists in the Client programs component of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1). An unauthenticated attacker with netwo...

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code...