PT-2026-119961

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

PT-2026-120086

Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware component: Remote Diagnostic Agent. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker wit...

Oracle E-Business Suite: CVE-2026-101544: Critical Patch Update

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Payroll executes to...

PT-2026-119652

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Enterprise Infrastructure SEC. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where JD Edwards...

PT-2026-119649

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: E1 Dev Platform Tech - UNIX. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where JD Edwards...

PT-2026-118398

Name of the Vulnerable Software and Affected Versions filelock versions 3.20.4 through 4.0.8 Description The ReadWriteLock and AsyncReadWriteLock functions resolve the lock path and pass it to SQLite without rejecting a final symbolic link. This allows a local user with permissions to create name...

PT-2026-119898

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications...

CentOS Linux 8.5 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.5:CLSA-2026:1791960930)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791960930 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

CentOS Linux 8 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS-STREAM8:CLSA-2026:1791954698)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1791954698 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function...

PT-2026-119620

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

PT-2026-119726

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Filesystems component allows a low-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation can lead to a system hang or frequent crashe...

PT-2026-120150

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink set root pwd of the file /mnt/mtd/aoni ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

evolution-data-server Database Unauthorized Access

The vulnerability of the ecmbsavecomponentwrappersync function in the evolution-data-server database server is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

MySQL 26.7 -- Multiple vulnerabilities, no fix available

Oracle reports: The October 2026 Critical Patch Update contains 98 new security patches for Oracle MySQL, 29 of which may be remotely exploitable without authentication. MySQL 26.7 is an Innovation release. It reached its end of life on 2026-10-20, when MySQL 26.10 was released, and Oracle ships ...

Siemens Software Center Uncontrolled Search Path Element Vulnerability

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application...

Trust module OPNsense Privilege Escalation

The vulnerability of the Trust module in the OPNsense operating system is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information and increase their privileges...

PT-2026-118493

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

CVE-2026-105453 IBM Sterling Connect:Direct for Unix Improper Privilege Management

IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management...

SUSE CVE-2026-111392

SGLang through 0.5.21 trusts caller-supplied mmhashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request's image content or...

SUSE CVE-2026-112074

A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/matpixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched...