PT-2026-121673

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device...

CVE-2026-82425

A reachable assertion in Apache bRPC version 1.18.0 on all platforms allows a malicious remote peer to crash the process, resulting in denial of service. Root Cause: When a Socket with health checking enabled fails, Socket::WaitAndReset closes its file descriptor while the event dispatcher may...

CVE-2026-82425 Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service

A reachable assertion in Apache bRPC version 1.18.0 on all platforms allows a malicious remote peer to crash the process, resulting in denial of service. Root Cause: When a Socket with health checking enabled fails, Socket::WaitAndReset closes its file descriptor while the event dispatcher may...

CVE-2026-82425

Apache bRPC versions prior to 1.18.0 are vulnerable to a denial of service via a reachable assertion in the Socket::OnInputEvent function. The root cause involves a race condition where a Socket with health checking enabled closes its file descriptor (fd), but the event dispatcher continues to de...

EUVD-2026-107219

A reachable assertion in Apache bRPC version 1.18.0 on all platforms allows a malicious remote peer to crash the process, resulting in denial of service. Root Cause: When a Socket with health checking enabled fails, Socket::WaitAndReset closes its file descriptor while the event dispatcher may...

EUVD-2026-105976

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-health. Supported versions that are affected are 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successfu...

EUVD-2026-105901

Vulnerability in Oracle Autonomous Health Framework component: Trace File Analyzer. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise...

EUVD-2026-105893

Vulnerability in Oracle Autonomous Health Framework component: Trace File Analyzer. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise...

EUVD-2026-105894

Vulnerability in Oracle Autonomous Health Framework component: Trace File Analyzer. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise...

EUVD-2026-105868

Vulnerability in Oracle Autonomous Health Framework component: AHF Instant Diagnostic Replay. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to...

PT-2026-120560

A reachable assertion in Apache bRPC version 1.18.0 on all platforms allows a malicious remote peer to crash the process, resulting in denial of service. Root Cause: When a Socket with health checking enabled fails, Socket::WaitAndReset closes its file descriptor while the event dispatcher may...

Windows Performance Optimization Disclosure

The vulnerability of the performance optimization and battery management functions Health and Optimized Experiences in Windows operating systems is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to disclose protected information...

CVE-2026-101568

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-health. Supported versions that are affected are 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successfu...

CVE-2026-101485

Vulnerability in Oracle Autonomous Health Framework component: Trace File Analyzer. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise...

CVE-2026-101477

Vulnerability in Oracle Autonomous Health Framework component: Trace File Analyzer. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise...

CVE-2026-101478

Vulnerability in Oracle Autonomous Health Framework component: Trace File Analyzer. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise...

CVE-2026-101452

Vulnerability in Oracle Autonomous Health Framework component: AHF Instant Diagnostic Replay. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to...

CVE-2026-101568

A vulnerability exists in the helidon-health component of the Oracle Fusion Middleware Helidon product. Affected versions include 3.0.0-3.2.21 , 4.0.0-4.5.5 , and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset o...

CVE-2026-101485

A vulnerability exists in the Oracle Autonomous Health Framework specifically within the Trace File Analyzer component in supported versions 26.3-26.8 . A low-privileged attacker with local access to the infrastructure can exploit this to compromise the framework, potentially leading to unauthori...

CVE-2026-101478

A vulnerability exists in the Oracle Autonomous Health Framework within the Trace File Analyzer component, affecting supported versions 26.3-26.8 . A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise the framework, potentially leading t...