CVE-2026-60417

...

CVE-2026-60408

...

CVE-2026-60397

...

CVE-2026-60386

...

CVE-2026-60312

CVE-2026-60312 affects Oracle WebLogic Server (Fusion Middleware Core). Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise the server and potentially takeover the Oracle WebLogic ...

CVE-2026-60302

...

CVE-2026-60295

...

CVE-2026-60230

CVE-2026-60230 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, potentially taking over the service....

CVE-2026-60206

...

CVE-2026-47058

CVE-2026-47058 affects Oracle Java SE (Scripting) on 8u491, 8u491-perf, and 11.0.31. The vulnerability enables an unauthenticated attacker over network protocols to compromise data confidentiality and integrity, potentially leading to unauthorized creation, deletion, or modification of data. The ...

CVE-2026-47040

...

CVE-2026-47032

...

CVE-2026-46988

The vulnerability affects Oracle Enterprise Manager Base Platform (Connector Framework) with affected versions 13.5 and 24.1. The root cause is not explicitly detailed in the provided documents, but the issue enables a high-privilege attacker who can reach the service over HTTPS to compromise the...

CVE-2026-46981

The CVE-2026-46981 entry affects Oracle Utilities Network Management System (Mobile component) with affected versions 2.5.0.1.0–2.5.0.1.17, 2.5.0.2.0–2.5.0.2.11, 2.6.0.1.0–2.6.0.1.12, 2.6.0.2.0–2.6.0.2.8, and 25.12.0.0.0–25.12.0.0.2. It is an unauthenticated, network-accessible vulnerability expl...

CVE-2026-43946 FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticated access to tag values when the referenced script does not exist. Version 1.3.1 patches the issue...

GHSA-8Q5V-6PQQ-X66H vulnerabilities

Vulnerabilities for packages: promitor, dotnet-bootstrap, dotnet-sdk, dotnet, powershell...

CVE-2026-16454

CVE-2026-16454 affects Eclipse hawkBit (DDI Controller)

bind: bind9: Unnecessary validation of DNSSEC signed records

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...

CVE-2026-56584 HCL IEM was affected with the Information disclosure nginx server

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

EUVD-2026-46273

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...