PT-2026-92899

🚨 CVE-2026-83432 Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-92831

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 12.2.1.4.0 Oracle BI Publisher version 26.01.0.0.0 Description A flaw in the Web Server component allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-92979

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

CVE-2026-83424: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Oracle JDeveloper. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDevelope...

PT-2026-92495

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.0.0 Description An issue exists in the Authentication Engine component of Oracle Access Manager. An unauthenticated attacker with network access via HTTP can explo...

PT-2026-92535

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2026-92796

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

PT-2026-93011

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

PT-2026-92750

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: EAI. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful attacks of...

PT-2026-92654

Name of the Vulnerable Software and Affected Versions Oracle Site Hub versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access to a subs...

PT-2026-92712

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.15 Description An issue exists in the Proxy User Delegation component of the Oracle User Management product. A low privileged attacker with network access via HTTP can exploit this flaw to...

PT-2026-92648

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Sales Online versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Sales Online allows a low privileged attacker with network access via HTTP to compromise the system...

PT-2026-92987

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications component: Reports. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Exploit for CVE-2026-73315

CVE-2026-73315 XenForo before 2.3.13 fetches the certificate...

CVE-2026-55526

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spidertools.hostisblocked does not resolve ordinary hostnames before scrapepage fetches them. A hostname such as 127.0.0.1.nip.io passes validation and resolves to loopback, permitting internal HTTP access. The fix uses...

CVE-2026-55526

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spidertools.hostisblocked does not resolve ordinary hostnames before scrapepage fetches them. A hostname such as 127.0.0.1.nip.io passes validation and resolves to loopback, permitting internal HTTP access. The fix uses...

CVE-2026-55526 PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spidertools.hostisblocked does not resolve ordinary hostnames before scrapepage fetches them. A hostname such as 127.0.0.1.nip.io passes validation and resolves to loopback, permitting internal HTTP access. The fix uses...

Oracle Essbase (August 2026 CSPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the August 2026 Critical Security Patch Update CSPU. It is, therefore, affected by multiple vulnerabilities: - Vulnerability in Oracle Essbase component: Essbase Web Platform Apache HTTP Server. The...

Oracle WebCenter Sites (August 2026 CSPU)

The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Sites installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported...

CVE-2026-73901

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 4.0.0-4.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of thi...