EUVD-2026-61395

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-61392

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: NDB Operator. Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromi...

CVE-2026-46482 MyBB: Security Question insufficient validation

Impact The registration component does not validate the text-based Security Question CAPTCHA correctly, allowing attackers to bypass the challenge via a specially crafted value. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Details The public Registration workflow member.php?action=doregister...

CVE-2026-75846

ArcadeDB before 26.8.1 affected versions = 26.7.3 contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase UPDATESCHEMA check. Any...

CVE-2026-75846 ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION

ArcadeDB before 26.8.1 affected versions = 26.7.3 contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase UPDATESCHEMA check. Any...

CVE-2026-75846 ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION

ArcadeDB before 26.8.1 affected versions = 26.7.3 contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase UPDATESCHEMA check. Any...

CVE-2026-75846

In ArcadeDB versions ≤ 26.7.3, DeleteFunctionStatement.executeSimple permanently removes any registered server-side function via the command API without calling checkPermissionsOnDatabase(UPDATE_SCHEMA). Any database user can delete security-relevant logic. Upgrade to 26.8.1. No in-the-wild explo...

K000162961: Multiple OpenJDK vulnerabilities

Security Advisory Description CVE-2026-46917 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM...

PT-2026-77825

Name of the Vulnerable Software and Affected Versions Oracle Process Manufacturing Systems versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can le...

PT-2026-77374

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.6 Description A flaw in the Marketing component of Oracle Siebel CRM allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77716

Name of the Vulnerable Software and Affected Versions Oracle Autonomous Health Framework versions 26 through 26.5.2 Description A flaw in the Cluster Health Analyzer component allows a low privileged attacker with access to the physical communication segment attached to the hardware where the...

PT-2026-78047

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 12.2.1.4.0 Oracle BI Publisher version 26.01.0.0.0 Description A flaw in the Web Service API component allows a low privileged attacker with network access via HTTP to compromis...

PT-2026-78192

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-77801

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle E-Business Tax versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle E-Business Tax product allows a low-privileged attacker with access to the execution...

PT-2026-77450

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector versions 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector versions 14.1.2.1.0 Description An issue exists in the Core component of the Oracle Identity Manager...

PT-2026-78116

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.14 Description A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation can lead to a full...

PT-2026-77729

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 Description An issue in the Deployment component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead...

PT-2026-78190

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-78013

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-77593

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue exists in the Installation and Configuration component that allows an unauthenticated attacker with local access to the infrastructure to compromise the syste...