CVE-2026-71166

...

CVE-2026-71164

...

CVE-2026-71155

Oracle Helidon 3.2.18 Imperative Web Server allows low-privilege HTTP attackers to read critical data and modify some data (CVSS 8.5). No patch version is specified; monitor Oracle's August 2026 CPU for remediation. No exploit code is available in the provided documents.

CVE-2026-71148

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected by an unauthenticated vulnerability in the Security component. An attacker with network access via HTTP can exploit this with low complexity to gain unauthorized read access to a subset of the product's accessible data. The CV...

CVE-2026-71131

...

CVE-2026-71122

Oracle Analytics BIE (version 26.01.0.0.0), Platform Security component, has a high-complexity, network-exploitable flaw requiring high privileges via HTTP; successful exploitation causes full product takeover with scope change to other products (CVSS 8.0). Oracle's August 2026 CPU advisory is th...

CVE-2026-71116

Oracle VM VirtualBox 7.2.14 Core component has a HIGH-severity local vulnerability (CVSS 7.5) exploitable by a high-privilege attacker logged into the host, potentially compromising the hypervisor and additional products (scope change). No fix version is specified in the provided documents. Monit...

CVE-2026-71106

Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet ) is affected by a vulnerability in versions 5.6.28.0–5.6.28.1 . An unauthenticated attacker with network access via HTTP can achieve full system takeover (complete compromise of confidentiality, integrity, and availability). ...

CVE-2026-71100

CVE-2026-71100 affects Oracle Database Server's RDBMS component across versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with network access via Oracle Net can exploit it to read a subset of database data. CVSS 3.1 score is 5.3 (MEDIUM). Oracle's August 2026 CPU adv...

CVE-2026-71092

CVE-2026-71092 affects the Lease Administration component of Oracle PeopleSoft Enterprise FIN Lease Administration version 9.2 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability (high complexity, no user interaction) to achieve unauthorized creation...

CVE-2026-71083

Oracle Agile PLM MCAD Connector CAX Client (affected version 3.6) has a low-severity (CVSS 1.8) local vulnerability requiring high privileges and user interaction; successful exploitation yields unauthorized read access to a subset of accessible data. No fix version or exploitation evidence is pr...

CVE-2026-71075

...

CVE-2026-71064

...

CVE-2026-71053

...

CVE-2026-71053

CVE-2026-71053 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Web Services Security component in version 6.2.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the product, resulting in ...

CVE-2026-71040

...

CVE-2026-71013

...

CVE-2026-71008

Oracle Commerce Experience Manager component in version 11.4.0 is affected by a network-reachable vulnerability exploitable by a high-privileged HTTP attacker, enabling unauthorized access to critical or all accessible data (CVSS 6.8, confidentiality impact). Exploitation details are not provided...

CVE-2026-70985

...

CVE-2026-70981

Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.