CVE-2026-60711

Summary: CVE-2026-60711 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The issue allows a low-privilege attacker over a network via HTTP to compromise the product, potentially taking over Siebel CRM Cloud Applications; impacts include confide...

CVE-2026-60663

...

CVE-2026-60363

CVE-2026-60363 affects Oracle HTTP Server (Apache Plugin) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.0.0. The flaw allows unauthenticated, network-based HTTP access that can lead to takeover of Oracle HTTP Server (CVSS 3.1 base score 9.8). Connected sources confirm vulnerable co...

MINI-5G5H-3CCC-6RVQ

Bulletin has no description...

MINI-W2Q7-47XR-F7V5

Bulletin has no description...

MINI-W9XM-99W5-JGC3

Bulletin has no description...

PT-2026-63301

Name of the Vulnerable Software and Affected Versions Gitea version 1.25.5 Description An insufficient authorization issue exists in the LFS server where the system uses the UserID embedded in an LFS JWT to make cross-repository authorization decisions via the LFSObjectAccessible function. When a...

PT-2026-61466

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the dma map resource function where a sanity check using pfn valid incorrectly identifies certain Memory-Mapped I/O MMIO addresses as RAM. On ARM64 systems using...

MINI-3MXW-VPW8-2P4G

Bulletin has no description...

MINI-F7J7-X33J-PR56

Bulletin has no description...

CVE-2026-13713

creationtimestamp| type| source ---|---|--- 2026-07-17 01:13:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqsl4r6v742u...

MINI-7W27-9PHV-74J6

Bulletin has no description...

MINI-HGJ3-QVP6-8PQG

Bulletin has no description...

MINI-55HP-3W67-PXVW

Bulletin has no description...

CVE-2026-55954

Authentication Bypass by Spoofing vulnerability in ueberauth ueberauthapple allows account takeover via unvalidated ID token claims. The Ueberauth.Strategy.Apple.Token.payload/2 function verifies the JWT signature of the callback idtoken against Apple's JWKS but does not validate any registered...

PYSEC-2026-2875 pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...

MINI-4QXM-84W2-X8P9

Bulletin has no description...

MINI-P862-7678-MR59

Bulletin has no description...

Decidim - Verification admins can access supplied IDs from other organizations

Description The verification admin mutation flow allows accessing, verifying, and rejecting participants records from another tenant. Impact A tenant admin can access, reject or approve another tenant's iddocuments requests. Credits This issue was discovered in a security audit organized by the...

GHSA-C8CC-PHH7-XMXR

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:06+00:00| seen| https://t.me/securixykz/1231 2026-07-13 00:00:17+00:00| seen| https://t.me/securixykz/1231 2026-07-14 00:01:03+00:00| published-proof-of-concept| https://t.me/securixykz/1231...