CVE-2026-64001

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture PCM Pulse Code Modulation OSS Open Sound System component. A local user could exploit a Use-After-Free UAF vulnerability in the sndpcmossprocwrite function. This occurs when a setup entry is prematurely linked into the...

CVE-2026-16628: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function childprocess.exec of the component JIT Plugin Entry Handler. Performing a manipulation of the argument jitPlugins results in os command injection. The attack is only possible with local access. The...

PT-2026-63557

Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.2.10 Description Applications using App Router built with Turbopack and a single entry in config.i18n.locales are susceptible to authentication bypass. Specifically, crafted requests can circumvent middleware...

DEBIAN-CVE-2026-16517

A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryption is enabled and the entry file size is close to INT64MAX, the addition of the encryption overhead to the entry size overflows int64...

CVE-2026-16517

A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryption is enabled and the entry file size is close to INT64MAX, the addition of the encryption overhead to the entry size overflows int64...

CVE-2026-16517

A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryption is enabled and the entry file size is close to INT64MAX, the addition of the encryption overhead to the entry size overflows int64...

CVE-2026-60847

Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Order Entry executes t...

CVE-2026-65319 Feedbin Unauthenticated Entry Content Disclosure via GET /api/v2/entries/:id/text

Feedbin commit 739884a contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private article content by sending requests to the entries text API endpoint, which skips the authorization before-action filter entirely. Attackers can iterat...

CVE-2026-62567

Oracle HRMS (UK) in Oracle E-Business Suite (UK Payroll) is affected on versions 12.2.3–12.2.15. The issue is exploitable with network access via HTTP by a low-privileged user, potentially leading to unauthorized access to critical data across Oracle HRMS (UK) and potentially other products (scop...

CVE-2026-62542

...

CVE-2026-62518

...

CVE-2026-62504

...

CVE-2026-62503

...

CVE-2026-62490

...

CVE-2026-62478

CVE-2026-62478 affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, potentially taking over Oracle Public Sector Fin...

CVE-2026-62472

The CVE-2026-62472 affects Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance) for versions 12.2.4–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized creation, deletion, or modification of critical Oracle Installed Base data,...

CVE-2026-62468

...

CVE-2026-62451

...

CVE-2026-62443

CVE-2026-62443 affects Oracle Contracts Integration in Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. An unauthenticated attacker with network access via HTTP can compromise the component, with successful attacks requiring user interaction. Impacts include un...

CVE-2026-61320

CVE-2026-61320 affects Oracle E‑Business Suite Payables (Internal Operations) in 12.2.8–12.2.15. The vulnerability is exploitable over HTTP with low privileges and can lead to takeover of Oracle Payables (CVSS v3.1 base 8.8). Oracle’s July 2026 CPU advisory contains the patches for this issue; ap...