CVE-2026-61145

CVE-2026-61145 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) in version 11.4.0. An unauthenticated attacker with network access via HTTP can compromise these components, potentially taking over the Guided Search/Experience Manag...

CVE-2026-60832

CVE-2026-60832 affects Oracle Interaction Blending (Oracle E-Business Suite, Internal Operations) in versions 12.2.3–12.2.15. The vulnerability can be exploited by a high-privilege attacker over a network via RMI, potentially allowing unauthorized update/insert/delete and read access to Oracle In...

ROOT-OS-UBUNTU-2204-CVE-2026-31540 CVE-2026-31540 in rootio-linux - Patched by Root

Root has patched CVE-2026-31540 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-31428 CVE-2026-31428 in rootio-linux - Patched by Root

Root has patched CVE-2026-31428 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-53006 CVE-2026-53006 in rootio-linux - Patched by Root

Root has patched CVE-2026-53006 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-31676 CVE-2026-31676 in rootio-linux - Patched by Root

Root has patched CVE-2026-31676 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

DEBIAN-CVE-2026-63854

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set nouserfence for VCN v3.0 enc/dec rings VCN encoder and decoder rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit...

ROOT-OS-UBUNTU-2404-CVE-2026-43318 CVE-2026-43318 in rootio-linux - Patched by Root

Root has patched CVE-2026-43318 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31473 CVE-2026-31473 in rootio-linux - Patched by Root

Root has patched CVE-2026-31473 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31566 CVE-2026-31566 in rootio-linux - Patched by Root

Root has patched CVE-2026-31566 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-34360 CVE-2026-34360 in io.root.ca.uhn.hapi.fhir:org.hl7.fhir.core - Patched by Root

Root has patched CVE-2026-34360 in the io.root.ca.uhn.hapi.fhir:org.hl7.fhir.core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-54306 CVE-2026-54306 in @rootio/n8n - Patched by Root

Root has patched CVE-2026-54306 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31649 CVE-2026-31649 in rootio-linux - Patched by Root

Root has patched CVE-2026-31649 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-20157

Technical details are not publicly available in provided documents. The CVE entry mentions missing encryption under CWE-311 and a Cisco RoomOS hardening release, but specific affected products, versions, root cause, impact, or fixes are not disclosed here. Monitor for updates.

UBUNTU-CVE-2026-48760

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlSanitizer::parse rejected raw BiDi formatting characters but not percent-encoded forms and used an ASCII-only whitespace check, allowing sanitized URLs...

CVE-2026-50359 Microsoft XML Core Services Elevation of Privilege Vulnerability

...

CVE-2026-50356 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

Chromium: CVE-2026-13819 Out of bounds read in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-11827

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o...

DEBIAN-CVE-2026-58252

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user could receive messages on denied subjects when a wildcard subscription overlapped with a configured wildcard deny rule but was not a subset...