EUVD-2026-61649

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payments. While the...

PT-2026-77804

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scripting. Successf...

PT-2026-77800

Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite component: Change Management. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77797

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-78091

Vulnerability in the Oracle HRMS Netherlands product of Oracle E-Business Suite component: Netherlands Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, argocd-image-updater, aws-efs-csi-driver-fips, aws-ebs-csi-driver, aws-efs-csi-driver, kubernetes, argocd-image-updater-fips, rancher-webhook, kubeflow-pipelines, kubernetes-csi-driver-hostpath, local-static-provisioner, ip-masq-agent,...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, aws-efs-csi-driver-fips, aws-ebs-csi-driver, aws-efs-csi-driver, prometheus-adapter, ip-masq-agent, nodetaint, spark-operator...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster, grafana-operator, stakater-reloader, grafana-rollout-operator, grafana-fips, cert-manager-fips, flux-helm-controller, go, polaris, localstack, gotenberg, aws-load-balancer-controller-fips, nova, pluto, terragrunt, metacontroller,...

EUVD-2026-46934

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: Web Service Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2026-62561

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...

CVE-2026-60176

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payments. Successful...

CVE-2026-46941

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Cost Maintenance. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, pvc-autoresizer-fips, lvm-driver-fips, onepassword-operator, zabbix-agent2-fips, argo-events, buf, gatus-fips, secrets-store-csi-driver-provider-azure, step-issuer, kind, json-exporter-fips, aws-load-balancer-controller-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: onepassword-operator, fluent-operator-fips, livekit-cli, kubernetes-csi-external-snapshotter, argocd-image-updater-fips, grype-fips, sftpgo-plugin-pubsub, livekit-egress, tfsec, percona-server-mongodb-operator-fips, containerd-fips, podinfo-fips, trillian-fips,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: newrelic-nri-kube-events-fips, secrets-store-csi-driver-provider-azure, kind, aws-load-balancer-controller-fips, fluent-operator-fips, prometheus-beat-exporter-fips, consul-k8s-fips, prometheus-operator, sftpgo-plugin-pubsub, opentelemetry-collector,...

Exploit for Missing Authentication for Critical Function in Oracle Marketing

✨ CVE-2025-62481 — Oracle Marketing Administration EBS Cri...

Exploit for Improper Authentication in Oracle Concurrent_Processing

CVE‑2025‑61882 Scan/Exploit ⚠️Legal Disclaimer Legal...

CVE-2025-61753

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful...

Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among Targets

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added five security flaws to its Known Exploited Vulnerabilities KEV Catalog, officially confirming a recently disclosed vulnerability impacting Oracle E-Business Suite EBS has been weaponized in real-world attacks. The...

⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More

Every week, the cyber world reminds us that silence doesn't mean safety. Attacks often begin quietly — one unpatched flaw, one overlooked credential, one backup left unencrypted. By the time alarms sound, the damage is done. This week's edition looks at how attackers are changing the game — linki...