CVE-2026-111768

In affected versions, servers put no limit on how many array elements and object keys they validated in one request. One HTTP request within the default 4 MiB size limit could exhaust the server's memory, and the process aborted with "JavaScript heap out of memory". No credentials are needed,...

CVE-2026-111771

In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server its audience. Where one authorization server issues tokens for several services, a valid token for another service was also accepted by your MCP server...

CVE-2026-91475

A vulnerability exists in the Oracle Outside In Technology product (component: Outside In Clean Content SDK ) of Oracle Fusion Middleware , specifically affecting version 8.5.8 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the pro...

CVE-2026-91460

A vulnerability exists in the Outside In Image Export SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (version 8.5.8 ). This easily exploitable flaw allows an unauthenticated attacker with access to the infrastructure to compromise the product, potentiall...

CVE-2026-91457

A vulnerability exists in the Outside In Image Export SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . An unauthenticated attacker with access to the infrastructure can compromise the product, potentially leading ...

CVE-2026-91459

The Oracle Outside In Technology product, specifically within the Oracle Fusion Middleware (component: Outside In Image Export SDK ), is affected by CVE-2026-91459 in version 8.5.8 . An unauthenticated attacker with logon access to the infrastructure where the software executes can compromise the...

CVE-2026-91404

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware). The affected supported version is 8.5.8 . An unauthenticated attacker with local access to the infrastructure where the software executes can easily ex...

CVE-2026-91405

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware . This issue affects version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-execute vulnerability to compro...

CVE-2026-91406

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise or take ov...

CVE-2026-91355

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with local access to the infrastructure where the software executes can exploit this vulnerabilit...

CVE-2026-91354

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (specifically version 8.5.8 ) within Oracle Fusion Middleware. A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Due to a s...

CVE-2026-91352

A vulnerability exists in the Outside In Clean Content SDK component of Oracle Outside In Technology (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a partial denial of serv...

CVE-2026-91353

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product, specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the technology, potentially resulting in una...

CVE-2026-91350

A vulnerability exists in the Oracle Outside In Technology product of Oracle Fusion Middleware , specifically within the Outside In Clean Content SDK component in version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a hang or a frequentl...

CVE-2026-91349

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (affected version 8.5.8 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or a frequently repeata...

CVE-2026-91351

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit thi...

CVE-2026-91346

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product (specifically version 8.5.8 ). An unauthenticated attacker with network access via HTTP can exploit this flaw, though it requires human interaction from a user other than the attacker....

CVE-2026-91345

A vulnerability exists in the Outside In Clean Content SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware , specifically affecting version 8.5.8 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a hang or a freq...

CVE-2026-91344

The Oracle Outside In Technology product, specifically the Outside In Clean Content SDK component within Oracle Fusion Middleware, is vulnerable in version 8.5.8 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to cause a hang or a frequently repeatable cr...

CVE-2026-91342

The Outside In Clean Content SDK component of the Oracle Fusion Middleware product (version 8.5.8 ) is vulnerable to a security flaw. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Outside In Technology . While the attack requires huma...