CVE-2026-101625

A vulnerability exists in the Connector/Net component of Oracle MySQL MySQL Connectors version 26.7.0 . An unauthenticated attacker with network access via multiple protocols can exploit this issue, which requires human interaction, to achieve unauthorized read access to a subset of accessible da...

CVE-2026-101625

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks...

CVE-2026-101605

The Oracle Utilities Network Management System product (component: System Wide ) contains a vulnerability affecting versions 2.4.0.1.0-2.4.0.1.33 , 2.5.0.1.0-2.5.0.1.18 , 2.5.0.2.0-2.5.0.2.11 , 2.6.0.1.0-2.6.0.1.12 , 2.6.0.2.0-2.6.0.2.10 , and 25.12.0.0.0-25.12.0.0.2 . This easily exploitable vul...

CVE-2026-101600

A vulnerability exists in the Oracle TimesTen In-Memory Database (specifically the TimesTen IMDB component) affecting versions 26.1-26.1.1.3.0 . A low-privileged attacker with logon access to the infrastructure where the database executes can exploit this difficulty-to-exploit vulnerability to co...

CVE-2026-101597

The Oracle ZFS Storage Appliance Kit (component: Core ) version 8.8 is affected by an easily exploitable vulnerability. An unauthenticated attacker with network access via HTTP can compromise the appliance, potentially resulting in unauthorized read access to a subset of accessible data. This vul...

CVE-2026-101595

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product, specifically within the Supply Chain Relationship Mgmt component in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successfu...

CVE-2026-101591

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is affected by a vulnerability in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset...

CVE-2026-101592

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, though the attack req...

CVE-2026-101589

The Oracle Utilities Network Management System product (component: System Wide ) is affected by a vulnerability in versions 2.6.0.1.0-2.6.0.1.12 , 2.6.0.2.0-2.6.0.2.10 , and 25.12.0.0.0-25.12.0.0.2 . An unauthenticated attacker with network access via HTTPS can exploit this issue to gain unauthor...

CVE-2026-101586

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient component. Impacted versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of Heli...

CVE-2026-101588

A vulnerability exists in the WebSocket component of the Helidon product within Oracle Fusion Middleware . Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise Helidon, potentially resulting in unaut...

CVE-2026-101582

The Helidon product of Oracle Fusion Middleware (specifically the helidon-integrations-vault component) is vulnerable in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101580

A vulnerability exists in the helidon-security-providers-jwt component of the Oracle Fusion Middleware Helidon product. Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a ...

CVE-2026-101576

The Helidon product of Oracle Fusion Middleware (specifically the LRA component) is affected by a vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101578

A vulnerability exists in the Helidon product of Oracle Fusion Middleware, specifically within the helidon-security-providers-google-login component. Affected versions include 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorize...

CVE-2026-101568

A vulnerability exists in the helidon-health component of the Oracle Fusion Middleware Helidon product. Affected versions include 3.0.0-3.2.21 , 4.0.0-4.5.5 , and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset o...

CVE-2026-101516

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20...

CVE-2026-101511

A vulnerability exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) affecting versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the platform, potentially leading to una...

CVE-2026-101493

A vulnerability exists in the Core component of Oracle REST Data Services affecting versions 24.2.0-26.2.1 . A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read , update , insert , or delete access to some of the accessible data within Oracle RE...

CVE-2026-101491

The PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (specifically the Query component) is affected by CVE-2026-101491 in versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of access...