CVE-2026-71092

CVE-2026-71092 affects the Lease Administration component of Oracle PeopleSoft Enterprise FIN Lease Administration version 9.2 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability (high complexity, no user interaction) to achieve unauthorized creation...

CVE-2026-71083

Oracle Agile PLM MCAD Connector CAX Client (affected version 3.6) has a low-severity (CVSS 1.8) local vulnerability requiring high privileges and user interaction; successful exploitation yields unauthorized read access to a subset of accessible data. No fix version or exploitation evidence is pr...

CVE-2026-71075

...

CVE-2026-71064

...

CVE-2026-71053

...

CVE-2026-71053

CVE-2026-71053 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Web Services Security component in version 6.2.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the product, resulting in ...

CVE-2026-71040

...

CVE-2026-71013

...

CVE-2026-71008

Oracle Commerce Experience Manager component in version 11.4.0 is affected by a network-reachable vulnerability exploitable by a high-privileged HTTP attacker, enabling unauthorized access to critical or all accessible data (CVSS 6.8, confidentiality impact). Exploitation details are not provided...

CVE-2026-70985

...

CVE-2026-70981

Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.

CVE-2026-70955

...

CVE-2026-70952

...

CVE-2026-70943

The Oracle Hyperion Financial Management Security component, version 11.2.25.0.000, is vulnerable to an unauthenticated, easily exploitable flaw requiring adjacent network access. Successful exploitation grants full confidentiality and integrity compromise of all accessible HFM data. CVSS 3.1 sco...

CVE-2026-70939

Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...

CVE-2026-70933

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable; a low-privileged network attacker can access all accessible data and cause partial DoS via HTTP. CVSS 7.1 (HIGH). No exploit or in-the-wild exploitation details provided. Patch status not specified in documents.

CVE-2026-70927

...

CVE-2026-70929

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) Security component flaw: a low-privileged attacker with network HTTP access can gain unauthorized read/write access to all application data. No patch details or exploitation evidence are provided. Apply Oracle's Aug...

CVE-2026-70923

...

CVE-2026-70924

Oracle Web Services Manager's Web Services Security component in versions 12.2.1.4.0 and 14.1.2.0.0 allows an unauthenticated, network-based attacker (via HTTPS) to fully compromise the product. CVSS 3.1 scores this HIGH (8.1) for confidentiality, integrity, and availability. Oracle has released ...