CVE-2026-71043

Oracle Agile PLM 9.3.6 (Security component) has an unauthenticated, network-reachable flaw exploitable via HTTP. CVSS 3.1 scores it HIGH (7.5, C:H), allowing unauthorized access to critical or all accessible data. No exploitation or patch details are provided; see Oracle's August 2026 CPU advisor...

CVE-2026-71044

...

CVE-2026-71038

...

CVE-2026-71033

...

CVE-2026-71014

...

CVE-2026-70960

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 7.6) Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized data access and modification with scope change. Oracle's August 2026 CPU patch is the remediation. No in-the-wild exp...

CVE-2026-70957

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) at version 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw: a low-privileged network attacker via HTTP can gain unauthorized read/write access to critical application data. No exploit or patch details are prov...

CVE-2026-70951

...

CVE-2026-70948

Oracle E-Business Suite Purchasing (versions 12.2.3–12.2.15) has a HIGH-severity flaw allowing a low-privileged attacker with network access to fully compromise the application; apply Oracle's August 2026 CPU patches immediately. No exploitation details are provided in the documents.

CVE-2026-70937

A HIGH-severity flaw in Oracle Hyperion Financial Management 11.2.25.0.000 Security component allows a low-privileged, network-authenticated attacker via HTTP to achieve full product compromise (confidentiality, integrity, availability). No exploitation evidence is provided; Oracle's August 2026 ...

CVE-2026-70926

...

CVE-2026-70923

...

CVE-2026-70919

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw requiring local infrastructure access, high complexity, and human interaction; successful exploitation grants unauthorized update/insert/delete access to application data. No exploit details provided. Patch status no...

CVE-2026-70911

...

CVE-2026-70910

Oracle Siebel CRM REST component (versions 17.0–26.6) is vulnerable to unauthenticated, network-accessible exploitation via HTTP, yielding unauthorized access to all Siebel CRM Integration data. CVSS 7.5 HIGH (confidentiality-only). Oracle's August 2026 CPU advisory is the primary reference. No e...

CVE-2026-70906

CVE-2026-70906 is a denial-of-service vulnerability in the 2D component of Oracle Java SE , affecting versions 25.0.4 and 26.0.2 . The underlying issue relates to font loading , as indicated by the associated OpenJDK security advisory (RLSA-2026:55798). An unauthenticated attacker with network ac...

CVE-2026-70905

...

CVE-2026-70903

...

CVE-2026-70902

Oracle Hyperion Data Relationship Management v11.2.25.0.000 has a HIGH-severity flaw (CVSS 7.1) in its Access and security component. A low-privileged local attacker can gain unauthorized creation, deletion, and modification access to all accessible data, with high confidentiality and integrity i...

CVE-2026-70891

...