CVE-2026-113799 Slack Morphism verifier errors disclose valid HMACs in the logs

Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request HMAC when signature verification fails. For an invalid request, slack-morphism computes the correct signature for the attacker-controlled timestamp...

CVE-2026-113799 Slack Morphism verifier errors disclose valid HMACs in the logs

Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request HMAC when signature verification fails. For an invalid request, slack-morphism computes the correct signature for the attacker-controlled timestamp...

CVE-2026-91333

A flaw was found in the Security component of Oracle Java SE. An unauthenticated remote attacker with network access could exploit this flaw by supplying crafted input to exposed application programming interfaces APIs or by executing untrusted code within sandboxed environments. A successful...

CVE-2026-91452

A flaw was found in the Networking component of Oracle Java SE and GraalVM. An unauthenticated remote attacker can exploit this vulnerability by submitting crafted data across the network to exposed application programming interfaces APIs, such as through a web service. A successful attack can...

Vulnerabilities in Oracle Analytics

Oracle has identified 33 vulnerabilities in various Oracle Analytics products, including Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher. The patch notes list these 33 vulnerabilities, among which 14 can be exploited remotely without the need for authentication. Depending ...

Vulnerabilities found in Oracle Communications

Oracle has identified 110 vulnerabilities in various Oracle Communications products, including Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications Service Catalog and Design, and Oracle Communications Operations...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified 194 vulnerabilities in the Oracle E-Business Suite and related components, specifically for versions 12.2.3 through 12.2.15. Depending on the specific vulnerability, these can be exploited by an attacker with network access to obtain unauthorized access to data, or to modify...

vulnerabilities in Oracle MySQL

Oracle has identified vulnerabilities in various products, including Oracle MySQL Server, MySQL Cluster, MySQL Enterprise Backup, MySQL Connectors including Connector/ODBC, and MySQL Router. These vulnerabilities affect various components of Oracle products, such as MySQL Server, MySQL Cluster,...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in Oracle Enterprise Manager, including the Base Platform, Data Guard Management, Siebel, and Virtualization components. These vulnerabilities affect versions 13.5 and 24.1. The vulnerabilities in Oracle Enterprise Manager can lead to unauthorized...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified new vulnerabilities in Oracle PeopleSoft Enterprise. These vulnerabilities relate to various security risks, including unauthorized access to data, unauthorized modification of data, and disruption of system availability denial-of-service attacks. Depending on the specific...

EUVD-2026-106848

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may...

EUVD-2026-106852

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover of...

EUVD-2026-106851

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized...

EUVD-2026-106850

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may...

EUVD-2026-106847

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized...

EUVD-2026-106849

Vulnerability in Oracle Essbase component: Java Based Agent. The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. While the vulnerability...

EUVD-2026-106853

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Dictionary Repository. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Da...

EUVD-2026-106844

Vulnerability in Oracle Essbase component: Security. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized...

EUVD-2026-106846

Vulnerability in Oracle Essbase component: Build. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks may significantl...

EUVD-2026-106835

Vulnerability in Oracle Essbase component: Java Based Agent. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in...