CVE-2026-62516

creationtimestamp| type| source ---|---|--- 2026-07-22 01:33:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr76kv4tsj2g 2026-07-23 18:20:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-56819

creationtimestamp| type| source ---|---|--- 2026-07-22 01:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr74onri4f2m 2026-07-22 02:42:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7cf3wyvf23 2026-07-27 16:00:06+00:00| seen|...

EUVD-2026-47563

Feedbin commit 739884a contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private article content by sending requests to the entries text API endpoint, which skips the authorization before-action filter entirely. Attackers can iterat...

PT-2026-63447

Name of the Vulnerable Software and Affected Versions ONTAP versions 9.16.1 and higher Description An issue exists in the WebAuthn multi-factor authentication MFA configuration related to the Relying Party ID. An attacker possessing valid credentials could exploit this to bypass the MFA process...

PT-2026-63495

Name of the Vulnerable Software and Affected Versions OIDC::Lite versions through 0.12.1 Description An issue exists where ID Token signature verification can be bypassed due to a token-controlled algorithm allowlist in the verify function. When a caller does not specify a pinned algorithm, the...

CVE-2026-60259

creationtimestamp| type| source ---|---|--- 2026-07-21 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xnk54l42r 2026-07-23 16:49:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 11:37:06+00:00| seen|...

CVE-2026-60249

creationtimestamp| type| source ---|---|--- 2026-07-21 23:22:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6x7ciqr42q 2026-07-23 16:49:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 23:07:07+00:00| seen|...

CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-60229

creationtimestamp| type| source ---|---|--- 2026-07-21 22:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6u36yys42a 2026-07-23 16:48:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 03:37:07+00:00| seen|...

CVE-2026-61225

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications component: Core. Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP/IP to compromise Oracle...

CVE-2026-61098

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-60389

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service...

CVE-2026-60153

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to...

CVE-2026-65319 Feedbin Unauthenticated Entry Content Disclosure via GET /api/v2/entries/:id/text

Feedbin commit 739884a contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private article content by sending requests to the entries text API endpoint, which skips the authorization before-action filter entirely. Attackers can iterat...

CVE-2026-62524

The CVE-2026-62524 vulnerability affects Oracle HRMS (US) within Oracle E-Business Suite (US Payroll - General), affecting 12.2.3–12.2.15. The issue allows a low-privileged, network-attacker (via HTTP) to compromise data: unauthorized update/insert/delete and read access to Oracle HRMS (US) data,...

CVE-2026-62504

The CVE-2026-62504 entry concerns Oracle Time and Labor within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15, and the vulnerability affects the Internal Operations component. An attacker with low privileges who can reach the system over HTTP can potentially compromise Oracle Time ...

CVE-2026-62478

CVE-2026-62478 affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, potentially taking over Oracle Public Sector Fin...

CVE-2026-61217

CVE-2026-61217 affects Oracle Fusion Middleware’s Oracle Security Service, specifically the Oracle SSL API component, with affected version 12.2.1.4.0. The vulnerability is exploitable by a low-privileged attacker who has network access via TLS and requires user interaction. Impact includes unaut...