PT-2026-63087

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM eProcurement version 9.2 Description An issue exists in the Manage Requisition Status component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62702

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise HCM Human Resources version 9.2 Description A security issue in the Security component allows a low privileged attacker with network access via Oracle Net to compromise the system. Successful exploitatio...

PT-2026-62553

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Requirements Planning version 9.2 Description A flaw in the Requirements Planning component allows a low-privileged attacker with network access via JDENET to compromise the system. Successful exploitation can...

PT-2026-62633

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Pay/Bill Management version 9.2 Description A flaw in the Paybill Management component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Th...

PT-2026-62657

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne HCM Foundation version 9.2 Description A flaw exists in the Time Accounting and HRM Base component of the Oracle JD Edwards EnterpriseOne HCM Foundation product. A low-privileged attacker with network access via...

PT-2026-62548

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne CRM Foundation version 9.2 Description A flaw in the CRM Foundation component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complet...

PT-2026-63089

Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterprise SCM...

PT-2026-62913

Name of the Vulnerable Software and Affected Versions Oracle Process Manufacturing Logistics versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite. A high privileged attacke...

PT-2026-62701

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 Description A flaw in the Global Payroll for Switzerland component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62547

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne CRM Foundation version 9.2 Description A flaw in the CRM Foundation component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complet...

PT-2026-62596

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-62703

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise HCM Human Resources version 9.2 Description A flaw in the Core component allows an unauthenticated attacker with network access via TCP to compromise the system. Successful exploitation can lead to...

PT-2026-62654

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise CS Campus Community version 9.2.38 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-63195

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-63175

Name of the Vulnerable Software and Affected Versions Oracle Trade Management versions 12.2.3 through 12.2.15 Description An issue exists in the Claim LOV component of the Oracle Trade Management product within Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...

EUVD-2026-45893

The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers to execute arbitrary JavaScript in the...

MiracleLinux 9 : redis-6.2.22-1.el9_8 (AXSA:2026-1300:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1300:02 advisory. redis: RESTORE invalid memory access may allow remote code execution CVE-2026-25243 Tenable has extracted the preceding description block directly from the...

CVE-2026-9734 W3SC Elementor to Zoho CRM <= 2.2.0 - Cross-Site Request Forgery to Settings Update

The W3SC Elementor to Zoho CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the storeInfo function. This makes it possible for unauthenticated attackers to modify the plugin's...

CVE-2026-53727

cssparser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssParser::Parserreadremotefile in lib/cssparser/parser.rb, and therefore loaduri! and the @import-following branch of addblock!, issued HTTP and HTTPS requests against any host, port, and URI without a scheme allowlist, host or IP filtering...

WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by HieuPenguinnn in WordPress Plugin WPDM – Premium Packages versions = 6.2.0...