CVE-2026-83113

A vulnerability in Oracle Quality (component: Internal Operations ) within Oracle E-Business Suite , affecting supported versions 12.2.3 through 12.2.15 , allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized ac...

EUVD-2026-79442

Vulnerability in the Oracle Quality product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful...

EUVD-2026-79439

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner...

CVE-2026-83112

Oracle Lease and Finance Management (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.7 through 12.2.15 is affected by an easily exploitable vulnerability. A high-privileged attacker with network access via HTTP can exploit it to achieve takeover of the affected product, ...

EUVD-2026-79440

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79418

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares...

CVE-2026-83091

Oracle Field Service (component: Internal Operations ) within Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, resulting in unauthorized access to critical...

EUVD-2026-79419

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...

CVE-2026-83092

This vulnerability affects Oracle Field Service (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it, though exploitation is rated as difficult (high attack complexity, no user in...

EUVD-2026-79420

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...

CVE-2026-83090

A vulnerability in Oracle Spares Management (component: Internal Operations) of Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows a low-privileged attacker with network access via HTTP to achieve takeover of the component. The vulnerability is rated CVSS 3.1 Base Score 8.8 (HIGH) wit...

EUVD-2026-79417

Vulnerability in the Oracle Alert product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Alert. Successful attacks...

CVE-2026-83089

Oracle Alert (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to a network-based attack. A low-privileged attacker with HTTP access can exploit this vulnerability to gain unauthorized creation, deletion, or modification of critical data, as...

CVE-2026-83076

CVE-2026-83076 affects the Internal Operations component of Oracle HR Intelligence in Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated difficult to exploit (high attack complexity)....

CVE-2026-69206 Http4s: DigestAuth allows replay of captured requests

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has accepted. When a legitimate client sends noncontiguous nc values because of parallel or retried requests, the stored...

EUVD-2026-78897

IBM Verify Identity Access containers may not apply management password change operations correctly...

CVE-2026-11921

IBM Verify Identity Access containers may not correctly apply management password change operations, leading to insufficiently protected credentials (CWE-522). This issue affects IBM Verify Identity Access (v11.0.0 - 11.0.3 IF1), IBM Security Verify Access (v10.0.0 - 10.0.9.2 IF1), and their resp...

EUVD-2026-78825

Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/getGenerateSignature.ts passes...

EUVD-2026-78658

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the estimatebatchcost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel...

CVE-2026-91987 atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Model

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the estimatebatchcost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel...