CVE-2026-75877

creationtimestamp| type| source ---|---|--- 2026-08-18 21:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf4eurikp22 2026-08-20 03:00:03+00:00| published-proof-of-concept| Telegram/TXByhyAHALLjU76evu5RVvsn4zpzLoBf6fuRONOvcY2o 2026-08-21 00:00:11+00:00|...

CVE-2026-70678

...

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-62633

...

CVE-2026-62620

...

CVE-2026-62613

CVE-2026-62613 affects the Security and Authentication component of Oracle Reports Developer (Oracle Fusion Middleware), version 12.2.1.19.0 . An unauthenticated attacker with access to the adjacent network segment can exploit this vulnerability with low complexity to compromise the product. Due ...

CVE-2026-62606

...

CVE-2026-62540

...

CVE-2026-62523

...

CVE-2026-62520

...

CVE-2026-62512

...

CVE-2026-61308

A medium-severity (CVSS 6.8) vulnerability in the Networking component of Oracle Java SE (8u501 through 26.0.2), GraalVM for JDK (17.0.20, 21.0.12), and GraalVM Enterprise Edition (21.3.19) allows unauthenticated remote attackers via HTTP to access critical data with high confidentiality impact; ...

CVE-2026-61124

The Runtime Tools component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0) has a network-reachable, easily exploitable flaw requiring only human interaction. An unauthenticated attacker can achieve high-integrity data modification or deletion and partial denial of service. No exp...

CVE-2026-61118

...

CVE-2026-61029

Oracle WebCenter Sites (component: WebCenter Sites) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based attack. An unauthenticated remote attacker can compromise the application, potentially impacting additional products (scope change), with CVSS 9.0 critical ...

CVE-2026-61022

...

CVE-2026-60983

A high-severity (CVSS 7.7) vulnerability in Oracle WebCenter Content's Content Server component (versions 14.1.2.0.0 and 12.2.1.4.0) allows a low-privileged attacker with network HTTP access to read critical data. No public exploit code or active exploitation details are provided in the documents...

CVE-2026-60958

...

CVE-2026-60853

CVE-2026-60853 affects Helidon (Oracle Fusion Middleware), specifically the Imperative Web Server component, in supported version 3.2.20 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). ...

CVE-2026-60849

Oracle Unified Directory (OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0 have a HIGH-severity (CVSS 8.5) LDAP network vulnerability exploitable by low-privileged attackers, enabling full product takeover with scope change; Oracle's August 2026 CPU advisory is the primary remediation source.