CVE-2026-51249

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

EUVD-2026-50468

Flyto2 Core: LLM/API keys leak to an attacker-controlled baseurl...

CLEANSTART-2026-IE12659 Security fixes in logstash-fips 9.2.6-r0

Package logstash-fips version 9.2.6-r0 fixes 12 vulnerabilities: ghsa-mxw3-3hh2-x2mh, ghsa-whrj-4476-wvmp, ghsa-2xgq-q749-89fq, CVE-2025-14762, CVE-2026-22860...

CVE-2026-67428

The CVE-2026-67428 entry concerns Flyto2 Core, an automation/AI-agent workflow kernel. Before version 2.26.7, multiple HTTP-emitting modules (including http/requests.py, core.api.http_get, core.api.http_post, graphql.query/mutation, monitor.http_check, communication.slack_send, notification.disco...

CVE-2026-67427

CVE-2026-67427 , affecting Flyto2 Core prior to 2.26.6, enables the workflow engine’s variable resolver to expand ${env.VAR} for any host environment variable without an allowlist or policy check. This bypasses the default capability policy denylist for env.get and env.load_dotenv, enabling a wor...

PT-2026-65892

Name of the Vulnerable Software and Affected Versions Flyto2 Core versions prior to 2.26.6 Description The llm.chat function reads provider keys, such as OPENAI API KEY and ANTHROPIC API KEY, from the environment and transmits them within the Authorization: Bearer header to a base url controlled ...

CVE-2026-60871

creationtimestamp| type| source ---|---|--- 2026-07-23 17:48:31+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

EUVD-2026-48120

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

EUVD-2026-48096

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

Oracle Linux 10 : .NET / 8.0 (ELSA-2026-21286)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-21286 advisory. 8.0.128-1.0.1 - Add support for Oracle Linux 8.0.128-1 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 8.0.127-1 - Update to...

CVE-2026-60371

CVE-2026-60371 affects Oracle Platform Security for Java (Fusion Middleware), specifically the Centralized Thirdparty Jars component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The issue is described as difficult to exploit, requiring low privileges and access to the hardware’s physical com...

EUVD-2026-47553

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

EUVD-2026-46986

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Installation Security. The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to t...

CVE-2026-62496

Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Yard Management...

CVE-2026-60621

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime Security. The supported version that is affected is 9.2.26.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

PT-2026-62666

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools version 9.2.26.3 Description An issue exists in the Installation Security component that allows an unauthenticated attacker with access to the physical communication segment attached to the hardware to...

PT-2026-63203

Name of the Vulnerable Software and Affected Versions Oracle Yard Management versions 12.2.6 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Yard Management allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-63230

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS US versions 12.2.6 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

EUVD-2026-41559

webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header...

Linux Distros Unpatched Vulnerability : CVE-2026-48978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge witho...