CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection. Mitigation Disable the [email protected] and [email protected]...

CVE-2026-14185

The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users with subscriber-level access to modify the WPBot WordPress plugin before 8.2.0's configuration...

EUVD-2026-46157

The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users with subscriber-level access to modify the WPBot WordPress plugin before 8.2.0's configuration...

CVE-2026-14185

The WPBot WordPress plugin prior to 8.2.0 is vulnerable: its retrieval-augmented-generation (RAG) settings handler lacks a capability and nonce check, allowing authenticated users with subscriber-level access to modify the plugin’s configuration. Root cause is missing authorization in the RAG set...

CVE-2026-14184

The CVE refers to the Academy LMS WordPress plugin before version 3.8.1, where several lesson AJAX handlers do not verify ownership of a user-supplied identifier. This allows authenticated users with subscriber-level access to read and modify other users’ lesson notes and to mark other users’ les...

CVE-2026-14184 Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR

The Academy LMS WordPress plugin before 3.8.1 does not verify ownership of a user-supplied user identifier in several of its lesson AJAX handlers, allowing authenticated users with subscriber-level access to read and modify other users' lesson notes and mark other users' lesson content as complet...

PT-2026-62654

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-63068

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description An issue exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process. An unauthenticated attacker with network acce...

PT-2026-62644

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2 Description An issue in the Common Application Objects component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62191

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u491 Description A flaw in the JavaFX component allows an unauthenticated attacker with network access via multiple protocols to compromise the system. This issue requires human interaction and affects Java deployments...

PT-2026-63114

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Workflow versions 12.2.3 through 12.2.15 Description A flaw in the Workflow Notification Mailer component allows an unauthenticated attacker with network access via SMTP to compromise the system. Successful...

PT-2026-63223

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS France versions 12.2.3 through 12.2.15 Description A flaw in the French HR component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead t...

PT-2026-62290

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Oracle WebLogic Server version 14.1.2.0.0 Oracle WebLogic Server version 15.1.1.0.0 Description An issue in the Core component of Oracle Fusion Middleware allo...

PT-2026-63163

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Bills of Material versions 12.2.13 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Bills of Material product. A low privileged attacker with network access via HTTP...

PT-2026-62687

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue in the Web Content Management component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to...

PT-2026-62701

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft component: Global Payroll for Switzerland. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-63103

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 Description A flaw in the eProcurement component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-62543

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebCenter Content: Imaging version 12.2.1.4.0 Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0 Description A flaw in the Core component allows a low privileged attacker with network access via HTT...

PT-2026-62542

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebCenter Content: Imaging version 12.2.1.4.0 Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0 Description A flaw in the Core component allows a low privileged attacker with network access via HTT...

PT-2026-62631

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Staffing Front Office version 9.2 Description An issue in the Staffing Front Office component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation ca...