CVE-2026-83380

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAAS. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 an...

CVE-2026-83373

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to gain unauthorized read access to a subset of accessible data. Successful ...

CVE-2026-73964

A vulnerability exists in the RDBMS component of Oracle Database Server (affected versions 19.3-19.32 and 21.3-21.23 ). A high-privileged attacker with Query Optimizer privileges and network access via Oracle Net can exploit this issue to compromise the RDBMS. Successful exploitation may lead to ...

CVE-2026-60964

A vulnerability exists in the Open Query component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ). A high-privileged attacker with access to the underlying infrastructure can exploit this difficult-to-exploit flaw to compromise the product, potentially resulting in unauthor...

CVE-2026-60874

A vulnerability exists in the Portal component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61 and 8.62 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful exploitation may lead to u...

CVE-2026-60500

A vulnerability exists in the Web Server component of Oracle PeopleSoft Enterprise PeopleTools affecting supported versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially resulting in unauthorized read access...

CVE-2026-101844

A vulnerability exists in the Oracle Concurrent Processing product within Oracle E-Business Suite , specifically affecting the Concurrent Requests component in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerab...

CVE-2026-101814

A vulnerability exists in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management ) affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Engineering, potentially resulting i...

CVE-2026-101805

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A high-privileged attacker with network access via HTTP can exploit this issue to compromise the Applications Manager. Successful expl...

CVE-2026-101790

A vulnerability exists in the Security component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low privileged attacker with logon access to the infrastructure can exploit this flaw to compromise the product, potent...

CVE-2026-101777

A vulnerability exists in the Encryption component of MySQL Server and MySQL Cluster (Oracle MySQL). Affected versions include MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster: 9.7.0-9.7.3, 26.7.0-26.7.1 . A high-privileged attacker with network access via multiple protocols can exploit...

CVE-2026-101777

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privilege...

CVE-2026-101745

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to a subset of accessible da...

CVE-2026-101740

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ). A low-privileged attacker with local infrastructure access can exploit this difficult-to-exploit vulnerability to compromise the product. Successfu...

CVE-2026-101734

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ) within the Oracle Supply Chain suite. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read ...

CVE-2026-101722

A vulnerability exists in the Server: Connection Handling component of MySQL Server and MySQL Cluster products from Oracle MySQL. Affected versions include MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster: 9.7.0-9.7.3, 26.7.0-26.7.1 . A low-privileged attacker with network access via mu...

CVE-2026-101722

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged...

CVE-2026-101716

A vulnerability exists in the Web Client component of Oracle Agile PLM (Oracle Supply Chain), specifically affecting version 9.3.6 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially resulting in unauthorized read access t...

CVE-2026-101633

A vulnerability exists in the MySQL Router product of Oracle MySQL (component: Router: General ) in version 26.7.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to compromise the MySQL Router, potentially resulting in unauthorized read access to a subset of acces...

CVE-2026-101632

A vulnerability exists in the Router: General component of Oracle MySQL Router version 26.7.0 . An unauthenticated attacker with network access via HTTPS can compromise the product, provided there is human interaction from a user other than the attacker. Successful exploitation can lead to unauth...