CVE-2026-83206

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-87248

A vulnerability in Oracle Hyperion Financial Management (component: Security ), affecting supported version 11.2.26.0.000 , allows a high-privileged attacker with local logon to the hosting infrastructure to compromise the application, resulting in a takeover with high impact on confidentiality, ...

EUVD-2026-79871

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

EUVD-2026-79865

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-87157

A vulnerability in the Product Diagnostic Tools component of Oracle Order Management (Oracle E-Business Suite) affects supported versions 12.2.4 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction, resulting in high c...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...

CVE-2026-83290

Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) has a vulnerability in the Platform Security component affecting versions 8.2.0.0.0 and 26.01.0.0.0 . A low-privileged attacker with local access can exploit this with low complexity and no user interaction, resulting in t...

CVE-2026-83253

CVE-2026-83253 affects the Endeca Application Controller component within Oracle Commerce Guided Search / Oracle Commerce Experience Manager (version 11.4.0 ). This easily exploitable vulnerability allows an unauthenticated attacker with local access to the infrastructure where the product execut...

CVE-2026-83211

Oracle Siebel CRM (component: Server Infrastructure ) in the Siebel CRM Deployment product has an easily exploitable local vulnerability affecting supported versions 17.0–26.7 . A low-privileged attacker with logon to the hosting infrastructure can exploit this with low complexity and no user int...

EUVD-2026-79545

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM component: Life Sciences. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Life Sciences executes t...

EUVD-2026-79541

Vulnerability in the Oracle User Management product of Oracle E-Business Suite component: Proxy User Delegation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User...

EUVD-2026-79497

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the...

EUVD-2026-79474

Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft component: Inventory. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

CVE-2026-82996

CVE-2026-82996 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Supported versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. A low-privileged attacker with logon to the infrastructure where the product executes can exploit...

PT-2026-92673

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description An unauthenticated attacker with access to the infrastructure where the software executes can compromise the system. This issue requires human interaction from a person other than t...

PT-2026-92909

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92776

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows an unauthenticated attacker with access to the infrastructure where the software execute...

PT-2026-92858

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition Analytics Server version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition Analytics Server version 26.01.0.0.0 Description A flaw in the Analytics Server component allows a low privilege...

CVE-2026-90840

PHPGurukul Blood Donor Management System 1.0 is affected by an improper authentication vulnerability in the __construct function of /application/controllers/admin/Dashboard.php (Admin Controllers component). The flaw can be exploited remotely with no privileges required and no user interaction , ...

CVE-2026-15923

The Zephyr SDIO subsystem function sdioiorwextendedhelper in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MINremaining, func-cis.maxblksize as the per-iteration step. The value func-cis.maxblksize is decoded directly from the SDIO card's CIS FUNCE tuple in sdiodecodec...