CVE-2026-91386

A vulnerability exists in the JD Edwards EnterpriseOne Orchestrator product (component: E1 IOT Orchestrator Security ) for supported versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardwar...

CVE-2026-91387

A vulnerability exists in the Open UI component of Oracle Siebel CRM End User (supported versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can exploit this issue to gain unauthorized read, update, insert, or delete access to a subset of accessible data. No specific expl...

CVE-2026-91385

A vulnerability exists in the JavaFX component of Oracle Java SE , Oracle JavaFX , and Oracle GraalVM Enterprise Edition (affected versions include Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4, and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1). An unauthenticated attacker with netw...

CVE-2026-91384

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is vulnerable in the Web Runtime SEC component (versions 9.2.0.0-9.2.26.5 ). A low-privileged attacker with network access via JDENET can easily exploit this vulnerability to compromise the tools. Successful exploitation may result i...

CVE-2026-91382

A vulnerability exists in the 2D component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . The affected versions include Oracle Java SE 8u503 , 8u503-perf , 11.0.32.1 , and 17.0.20.1 ; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 ; and Oracle GraalVM Enterpr...

CVE-2026-91381

A vulnerability exists in the 2D component of Oracle Java SE and Oracle GraalVM Enterprise Edition . The issue affects Oracle Java SE versions 8u503 and 8u503-perf , and Oracle GraalVM Enterprise Edition version 21.3.19.1.1 . An unauthenticated attacker with network access via multiple protocols ...

CVE-2026-91383

A vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Monitoring and Diagnostics SEC component. Affected versions include 9.2.0.0-9.2.26.5 . This difficult-to-exploit vulnerability allows a high privileged attacker with network access ...

CVE-2026-91378

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically within the Open Integration component, affecting versions 25.12-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the integration, though the attack r...

CVE-2026-91380

A vulnerability exists in the Utility component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Orac...

CVE-2026-91379

A vulnerability exists in the JDK tools component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle Gr...

POC-2020-8559

POC-2020-8559 Exploit for CVE-2020-8559. We steal all the connections to the kubelet using iptables then rewrite the 101 or 302 responses to 307. The 101s are for modern Kubernetes versions, the 302s are for older ones. We don't have access to the kube-apiserver's x509 cert, so kubelet webhook au...

CVE-2026-91377

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically affecting the Open Integration component in versions 25.12-26.9 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitat...

CVE-2026-91376

A vulnerability in the Web Access component of Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management allows a low-privileged attacker with network access via HTTP to compromise the system. The vulnerability is difficult to exploit and requires human interaction ...

CVE-2026-91375

A vulnerability in the Libraries component of Oracle Java SE and Oracle GraalVM allows an unauthenticated attacker with infrastructure access to compromise the environment. This high-complexity exploit requires human interaction and can result in the unauthorized creation, deletion, or modificati...

CVE-2026-91372

A vulnerability exists in the Siebel Cloud Manager component of the Siebel CRM Cloud Applications product (versions 22.3-26.9 ). A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise the application, potentially resulting in unauthorized ...

CVE-2026-91373

A vulnerability exists in the JSSE component of Oracle Java SE (affected versions: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1), Oracle GraalVM for JDK (17.0.20.1, 21.0.12.1), and Oracle GraalVM Enterprise Edition (21.3.19.1.1). An unauthenticated attacker with network access via...

CVE-2026-91374

A vulnerability in the Serviceability component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition allows an unauthenticated attacker with network access to compromise the systems. The flaw is difficult to exploit but can result in unauthorized read, update, insert...

CVE-2026-91369

A vulnerability exists in the Siebel Cloud Manager component of the Siebel CRM Cloud Applications product (versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the applications. Successful exploitation may r...

CVE-2026-91371

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the application, potentially resulting in unauthorized read access to a...

CVE-2026-91370

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the application, potentially resulting in unauthorized read access to a...