CVE-2026-101745

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to a subset of accessible da...

CVE-2026-101740

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ). A low-privileged attacker with local infrastructure access can exploit this difficult-to-exploit vulnerability to compromise the product. Successfu...

CVE-2026-101734

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ) within the Oracle Supply Chain suite. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read ...

CVE-2026-101722

A vulnerability exists in the Server: Connection Handling component of MySQL Server and MySQL Cluster products from Oracle MySQL. Affected versions include MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster: 9.7.0-9.7.3, 26.7.0-26.7.1 . A low-privileged attacker with network access via mu...

CVE-2026-101722

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged...

CVE-2026-101716

A vulnerability exists in the Web Client component of Oracle Agile PLM (Oracle Supply Chain), specifically affecting version 9.3.6 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially resulting in unauthorized read access t...

CVE-2026-101633

A vulnerability exists in the MySQL Router product of Oracle MySQL (component: Router: General ) in version 26.7.0 . A low-privileged attacker with network access via HTTPS can exploit this flaw to compromise the MySQL Router, potentially resulting in unauthorized read access to a subset of acces...

CVE-2026-101632

A vulnerability exists in the Router: General component of Oracle MySQL Router version 26.7.0 . An unauthenticated attacker with network access via HTTPS can compromise the product, provided there is human interaction from a user other than the attacker. Successful exploitation can lead to unauth...

CVE-2026-101625

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks...

CVE-2026-101625

A vulnerability exists in the Connector/Net component of Oracle MySQL MySQL Connectors version 26.7.0 . An unauthenticated attacker with network access via multiple protocols can exploit this issue, which requires human interaction, to achieve unauthorized read access to a subset of accessible da...

CVE-2026-101605

The Oracle Utilities Network Management System product (component: System Wide ) contains a vulnerability affecting versions 2.4.0.1.0-2.4.0.1.33 , 2.5.0.1.0-2.5.0.1.18 , 2.5.0.2.0-2.5.0.2.11 , 2.6.0.1.0-2.6.0.1.12 , 2.6.0.2.0-2.6.0.2.10 , and 25.12.0.0.0-25.12.0.0.2 . This easily exploitable vul...

CVE-2026-101600

A vulnerability exists in the Oracle TimesTen In-Memory Database (specifically the TimesTen IMDB component) affecting versions 26.1-26.1.1.3.0 . A low-privileged attacker with logon access to the infrastructure where the database executes can exploit this difficulty-to-exploit vulnerability to co...

CVE-2026-101597

The Oracle ZFS Storage Appliance Kit (component: Core ) version 8.8 is affected by an easily exploitable vulnerability. An unauthenticated attacker with network access via HTTP can compromise the appliance, potentially resulting in unauthorized read access to a subset of accessible data. This vul...

CVE-2026-101595

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product, specifically within the Supply Chain Relationship Mgmt component in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the system, though successfu...

CVE-2026-101592

A vulnerability exists in the Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, though the attack req...

CVE-2026-101591

The Oracle Agile Product Lifecycle Management for Process product (specifically the Product Quality Management component) is affected by a vulnerability in version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset...

CVE-2026-101589

The Oracle Utilities Network Management System product (component: System Wide ) is affected by a vulnerability in versions 2.6.0.1.0-2.6.0.1.12 , 2.6.0.2.0-2.6.0.2.10 , and 25.12.0.0.0-25.12.0.0.2 . An unauthenticated attacker with network access via HTTPS can exploit this issue to gain unauthor...

CVE-2026-101588

A vulnerability exists in the WebSocket component of the Helidon product within Oracle Fusion Middleware . Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise Helidon, potentially resulting in unaut...

CVE-2026-101586

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient component. Impacted versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of Heli...

CVE-2026-101582

The Helidon product of Oracle Fusion Middleware (specifically the helidon-integrations-vault component) is vulnerable in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve unauthorized read access to a subset of Helidon accessible data...