CVE-2026-71149

...

CVE-2026-71144

Oracle Hyperion Financial Management version 11.2.25.0.000 has a local Security component vulnerability exploitable only by a high-privileged attacker with infrastructure logon access. Successful exploitation allows unauthorized read and limited update/insert/delete access to accessible data; ava...

CVE-2026-71137

...

CVE-2026-71130

...

CVE-2026-71132

Oracle VM VirtualBox 7.2.14 (component: Core) is affected by a local, high-complexity vulnerability requiring high privileges, with scope-change effects that can expose all VirtualBox-accessible data. CVSS 3.1 scores it MEDIUM (5.3), confidentiality-only impact. Oracle published security advisory...

CVE-2026-71125

...

CVE-2026-71120

...

CVE-2026-71119

Oracle HFM Security component in version 11.2.25.0.000 is affected by a local vulnerability exploitable only by a high-privileged attacker with infrastructure access, potentially resulting in full application takeover (CVSS 6.4). No exploit details are provided; Oracle's August 2026 security advi...

CVE-2026-71116

Oracle VM VirtualBox 7.2.14 Core component has a HIGH-severity local vulnerability (CVSS 7.5) exploitable by a high-privilege attacker logged into the host, potentially compromising the hypervisor and additional products (scope change). No fix version is specified in the provided documents. Monit...

CVE-2026-71117

Oracle Hyperion Financial Management version 11.2.25.0.000 contains a Security-component flaw (CVSS 7.5, HIGH) exploitable by a high-privileged local attacker to fully compromise the application and potentially other products. Oracle's August 2026 CPU advisory is the remediation reference. No exp...

CVE-2026-71111

The Installer component of Oracle Identity Manager (versions 12.2.1.4.0 and 14.1.2.1.0) is vulnerable to a local privilege escalation (CVSS 7.8, HIGH) allowing a low-privileged attacker with host access to take over the product. No exploitation details are provided; apply the Oracle August 2026 C...

CVE-2026-71109

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has an easily exploitable local vulnerability allowing high-privileged attackers with infrastructure access to fully compromise the product (CVSS 6.7). No exploitation details are provided. Patch status is not specified in the ...

CVE-2026-71106

Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet ) is affected by a vulnerability in versions 5.6.28.0–5.6.28.1 . An unauthenticated attacker with network access via HTTP can achieve full system takeover (complete compromise of confidentiality, integrity, and availability). ...

CVE-2026-71104

...

CVE-2026-71089

Oracle Agile PLM MCAD Connector CAX Client version 3.6 is vulnerable: an unauthenticated attacker with local infrastructure access can exploit it (low complexity, human interaction required) to gain unauthorized read access to a subset of accessible data. CVSS 3.3 LOW; no exploitation observed. O...

CVE-2026-71079

...

CVE-2026-71078

Oracle Agile PLM MCAD Connector (component: CAX Client, version 3.6) has a local privilege escalation vulnerability requiring low privileges, high attack complexity, and human interaction. Successful exploitation yields unauthorized read/write/delete access to a subset of data and partial DoS. CV...

CVE-2026-71076

...

CVE-2026-71064

...

CVE-2026-71043

Oracle Agile PLM 9.3.6 (Security component) has an unauthenticated, network-reachable flaw exploitable via HTTP. CVSS 3.1 scores it HIGH (7.5, C:H), allowing unauthorized access to critical or all accessible data. No exploitation or patch details are provided; see Oracle's August 2026 CPU advisor...