PT-2026-62584

Name of the Vulnerable Software and Affected Versions Oracle Business Process Management Suite version 12.2.1.4.0 Oracle Business Process Management Suite version 14.1.2.0.0 Description A flaw in the Human Workflow component of the Oracle Business Process Management Suite allows a low privileged...

PT-2026-63256

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A signed integer overflow occurs in the ZIP writer. Within the archive write zip header function in archive write set format zip.c, when ZIP encryption is active and the entry file size is...

PT-2026-62684

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Web Content Management component of Oracle Fusion Middleware. A low privileged attacker with network access via HTTP can...

PT-2026-62494

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to...

PT-2026-62215

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.12 Description A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized update,...

PT-2026-62216

Name of the Vulnerable Software and Affected Versions Oracle Data Integrator version 12.2.1.4.0 Oracle Data Integrator version 14.1.2.0.0 Description A flaw exists in the Rest Service component of Oracle Fusion Middleware. This issue allows an unauthenticated attacker with network access via HTTP...

PT-2026-62840

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Work in Process product. An unauthenticated attacker with network access via HTTP can...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:3136-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3136-1 advisory. Update to version 2.2.10git255.752643c78. Security issues fixed: - CVE-2026-11610: missing bounds check in sasliorecv can lead to a...

PT-2026-62372

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description An issue exists in the Core component of Oracle Coherence within Oracle Fusion Middleware. An unauthenticated attacker with network access via HTTP can exploit this fl...

PT-2026-62770

Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description A flaw in the Core component of the Oracle Application Object Library allows a low privileged attacker with network access via HTTPS to compromise the system. This...

PT-2026-63064

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process version 6.2.4 Description A flaw in the Product Quality Management component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation...

PT-2026-62970

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/J versions 9.7.0 through 9.7.1 Description An unauthenticated attacker with network access via multiple protocols can compromise MySQL Connectors. This issue requires human interaction from a person other than the attack...

PT-2026-62241

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.12 Description A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation can result in a...

PT-2026-62356

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description An issue in the Core component of Oracle Coherence allows an unauthenticated attacker with network access via TCP to compromise the system. Successful...

PT-2026-62239

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions 19.1.0.0.0 through 19.29.0.0 Oracle GoldenGate versions 21.3 through 21.21 Oracle GoldenGate versions 23.4 through 23.26.1.0.0 Description An issue exists in the Service Manager component that allows a low privileged...

PT-2026-62384

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description An issue in the Core component of Oracle Coherence allows an unauthenticated attacker with network access via TCP to compromise the system. Successful...

PT-2026-61819

Name of the Vulnerable Software and Affected Versions TeX Live affected versions not specified GNOME Evince affected versions not specified Description The SyncTeX parser synctex parser.c contains a heap use-after-free issue. This occurs when a malformed .synctex or .synctex.gz file constructs a...

Volume Is Not Risk: Making Sense of the “Vulnpocalypse”

A briefing for security leaders on separating vulnerability disclosure volume from exploitable risk in 2026...

PT-2026-63154

Name of the Vulnerable Software and Affected Versions Oracle Product Hub versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full...

PT-2026-62465

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Service Delivery Platform Messaging Enabler version 12.2.1.4.0 Oracle Fusion Middleware Service Delivery Platform Messaging Enabler version 14.1.2.0.0 Description An unauthenticated attacker with network access via SOA...