CVE-2026-93442 IBM QRadar SIEM Out-of-bounds Read

IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read...

CVE-2026-113731 djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the findhandlersfortemplate MCP tool in python/djust/mcp/server.py accepts an existing absolute templatepath and reads it without...

CVE-2026-113731 djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the findhandlersfortemplate MCP tool in python/djust/mcp/server.py accepts an existing absolute templatepath and reads it without...

CVE-2026-113731

The djust framework (versions 0.9.0 through 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8) contains an arbitrary absolute-path file read vulnerability in the find_handlers_for_template MCP tool located in python/djust/mcp/server.py. The root cause is that the tool accepts an absolute template_path and reads...

CVE-2026-91657

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially leading to unauthorized read access to a subset of accessible data. No specific exploit code o...

CVE-2026-91652

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized read access to a subset of accessible data withi...

CVE-2026-91648

A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via TCP can exploit this flaw to compromise the system, potentially gaining unauthorized read access to a subset of accessible data. While specific explo...

CVE-2026-91650

A vulnerability exists in the Java Based Agent component of Oracle Essbase (affected version 21.8.3.0.0 ). This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized read access to a...

CVE-2026-91645

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this issue to compromise the system, potentially leading to unauthorized read access to a subset of accessible data. While the specific root...

CVE-2026-91643

A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized read access to a subset of accessible data. The issue is rated ...

CVE-2026-91640

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. Due to a scope change , ...

CVE-2026-91641

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. Due to a scope ch...

CVE-2026-91634

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this flaw to compromise the system, potentially resulting in unauthorized read access to a subset of accessible data. This is categori...

CVE-2026-91631

A vulnerability in the Security component of Oracle Essbase version 21.8.3.0.0 allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in unauthorized read access to a subset of accessible data within Oracle Essbase, with a potent...

CVE-2026-91616

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.1.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to g...

CVE-2026-91613

A vulnerability exists in the Security component of the Oracle Communications Unified Inventory Management product, affecting versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. A low-privileged attacker with logon access to the infrastructure can exploit this vulnerability to compromise the s...

CVE-2026-91614

A vulnerability exists in the Security component of Oracle Communications Unified Inventory Management (affected versions: 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 ). A low-privileged attacker with logon access to the infrastructure where the software executes can easily exploit this flaw to ...

CVE-2026-91612

A vulnerability in the Security component of Oracle Communications Unified Inventory Management (affected versions: 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1) allows a low-privileged attacker with local infrastructure access to compromise the product. Successful exploitation can result in unau...

CVE-2026-91607

The Oracle Business Intelligence Enterprise Edition product within Oracle Analytics is affected by a vulnerability in the Analytics Server component. This issue impacts versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerabilit...

CVE-2026-91600

A vulnerability exists in the Visual Analyzer component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting version 26.01.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially resulting ...