Oracle Global Order Promising security vulnerability

A security vulnerability exists in Oracle Global Order Promising versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Web Service component, potentially allowing low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, ...

Oracle E-Business Suite: CVE-2026-101841: Critical Patch Update

Vulnerability in the Global Order Promising product of Oracle E-Business Suite component: Web Service. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Global Order Promising. Whil...

Azul Zulu: CVE-2026-91452: Vulnerability in Azul Zulu

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK:...

PT-2026-120072

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher...

Azul Zulu: CVE-2026-91451: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable...

Siemens APOGEE Controllers Stack-based Buffer Overflow (CVE-2026-102076)

The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Azul Zulu: CVE-2026-87255: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

PT-2026-118467

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the block configurable reports get report data web service. When check permissions fails, the function only adds a warning and still...

PT-2026-119510

Vulnerability in the Global Order Promising product of Oracle E-Business Suite component: Web Service. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Global Order Promising. Whil...

Azul Zulu: CVE-2026-87291: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...

Azul Zulu: CVE-2026-87293: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromis...

PT-2026-119410

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 26.0.2 Description An issue exists in the Compiler component that allows an unauthenticated attacker with network access via multiple protocols to compromise the system. This can be achieved by supplying data to APIs...

Siemens APOGEE Controllers Stack-based Buffer Overflow (CVE-2026-102075)

The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Web Service API component. Vulnerable attackers with low privileges could access the system via the HTTP network. This allows them to update, insert, or delete...

Astra Linux – vulnerability in openjdk-11

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products under Oracle Java SE component: Hotspot. Affected versions include Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, and 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, and 22; and Oracle...

Astra Linux – vulnerability in Zabbix

An arbitrary file read vulnerability exists in the Zabbix Web Service Report Generation component, which listens on port 10053. The service fails to perform proper validation of URL parameters prior to reading files...

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102076

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102076

A vulnerability exists in the web service of various APOGEE and TALON products, including MBC , MEC , PXC Compact , PXC Modular , and TC Compact/Modular models. The root cause is the improper validation of user-supplied input within the upload code, categorized as a stack-based buffer overflow (C...

EUVD-2026-98408

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...