CVE-2026-91537

A vulnerability exists in the Utility component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can easily exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle Solaris . The vulnerability is associated with...

CVE-2026-91505

A vulnerability exists in the Porting component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ). A high-privileged attacker with access to the execution infrastructure can exploit this flaw to compromise the product. Successful exploitation may lead to unauthorized creation,...

CVE-2026-91501

A vulnerability exists in the Installer component of the Oracle Identity Manager product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise Oracle ...

CVE-2026-91489

A vulnerability exists in the LDAP Gateway component of the Oracle Identity Manager Connector product within Oracle Fusion Middleware , affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low privileged attacker with access to the infrastructure where the software executes can exploit this...

CVE-2026-91486

A vulnerability exists in the General Ledger component of Oracle PeopleSoft Enterprise FIN General Ledger Brazil (version 9.1 ). A low-privileged attacker with access to the infrastructure where the product executes can exploit this flaw to compromise the system. Successful exploitation may lead ...

CVE-2026-91488

The Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the Generic REST component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the connecto...

CVE-2026-91484

A vulnerability exists in the Java plugin component of Oracle Java SE versions 8u503 and 8u503-perf . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise Oracle Java SE. This vulnerability specifically impacts Java deployments...

CVE-2026-91475

A vulnerability exists in the Oracle Outside In Technology product (component: Outside In Clean Content SDK ) of Oracle Fusion Middleware , specifically affecting version 8.5.8 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the pro...

CVE-2026-91473

A vulnerability exists in the Web Listener component of the Oracle HTTP Server product within Oracle Fusion Middleware (affected version 12.2.1.4.0 ). A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to compromise the Oracle HTTP Server, po...

CVE-2026-91446

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A high-privileged attacker with local access to the infrastructure where the deployment executes can easily exploit this flaw to comprom...

CVE-2026-91444

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (versions 17.0-26.9 ). A high-privileged attacker with local access to the infrastructure where the product executes can exploit this flaw to compromise and potentially take over the Siebel CRM Deploymen...

CVE-2026-91434

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). A high-privileged attacker with local access to the infrastructure where the software executes can exploit this vulnerability to compromise and potentially take over the S...

CVE-2026-91431

The Siebel CRM End User product of Oracle Siebel CRM (component: Open UI ) is vulnerable in versions 17.0-26.9 . A low-privileged attacker with logon access to the infrastructure where the software executes can exploit this vulnerability to compromise the system. Successful exploitation may lead ...

CVE-2026-91427

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). A high-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the deployment and cause a partial denial of service (partial DOS) ....

CVE-2026-91423

The Siebel CRM Deployment product of Oracle Siebel CRM (specifically the Server Infrastructure component) is affected by a vulnerability in versions 17.0-26.9 . A high-privileged attacker with local access to the infrastructure can exploit this to compromise the deployment, potentially gaining un...

CVE-2026-91419

The Oracle HTTP Server product of Oracle Fusion Middleware (specifically the OSSL Module ) is affected by a vulnerability in version 12.2.1.4.0 . A low-privileged attacker with access to the infrastructure where the server executes can easily exploit this flaw to compromise and potentially take o...

CVE-2026-91418

A vulnerability exists in the ImageIO component of Oracle Java SE , Oracle JavaFX , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE (8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27), Oracle JavaFX (21.0.12, 25.0.4, 27), Or...

CVE-2026-91410

Vulnerability in Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable...

CVE-2026-91404

A vulnerability exists in the Outside In PDF Export SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware). The affected supported version is 8.5.8 . An unauthenticated attacker with local access to the infrastructure where the software executes can easily ex...

CVE-2026-91372

A vulnerability exists in the Siebel Cloud Manager component of the Siebel CRM Cloud Applications product (versions 22.3-26.9 ). A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise the application, potentially resulting in unauthorized ...