EUVD-2026-61338

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61293

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity...

EUVD-2026-61395

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-75846 ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION

ArcadeDB before 26.8.1 affected versions = 26.7.3 contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase UPDATESCHEMA check. Any...

CVE-2026-75846 ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION

ArcadeDB before 26.8.1 affected versions = 26.7.3 contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase UPDATESCHEMA check. Any...

CVE-2026-75846

In ArcadeDB versions ≤ 26.7.3, DeleteFunctionStatement.executeSimple permanently removes any registered server-side function via the command API without calling checkPermissionsOnDatabase(UPDATE_SCHEMA). Any database user can delete security-relevant logic. Upgrade to 26.8.1. No in-the-wild explo...

CVE-2026-72376

A flaw was found in the Andrew File System AFS component of the Linux kernel. An issue exists where the net-cellsoutstanding counter is incremented before a necessary failure check during idralloccyclic operations. This can lead to the counter being incorrectly incremented even when an error...

PT-2026-78098

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 12.2.1.4.0 Oracle Identity Manager versions 14.1.2.1.0 Description A flaw in the Installer component of the Oracle Identity Manager product of Oracle Fusion Middleware allows a low privileged attacker with acce...

PT-2026-77940

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

Linux Distros Unpatched Vulnerability : CVE-2026-74327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in isvmareahugepages findvmarea can return NULL if the...

PT-2026-77801

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle E-Business Tax versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle E-Business Tax product allows a low-privileged attacker with access to the execution...

Linux Distros Unpatched Vulnerability : CVE-2026-72378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix error code in afsextractvladdrs The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on ever...

Fedora 44 : php-phpseclib (2026-fac5581caa)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fac5581caa advisory. Update to v2.0.55 - contains fix for CVE-2026-44167 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

PT-2026-77451

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector version 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector version 14.1.2.1.0 Description An issue in the Core component allows an unauthenticated attacker with acce...

PT-2026-77859

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description A flaw exists that allows a low-privileged attacker with Load Testing for Web Apps privileges and network access via HTTPS to compromise the system. Successful exploitation can lead...

PT-2026-77416

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the Tuxedo component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system...

PT-2026-77733

Name of the Vulnerable Software and Affected Versions Oracle Autonomous Health Framework component: Trace File Analyzer versions 26-26.1.0 Oracle Autonomous Health Framework component: Trace File Analyzer version 26.2.0 Oracle Autonomous Health Framework component: Trace File Analyzer version...

PT-2026-78171

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 3.2.19 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to a hang or a frequently...

PT-2026-77730

Name of the Vulnerable Software and Affected Versions Oracle Autonomous Health Framework component: Trace File Analyzer versions 26-26.1.0 Oracle Autonomous Health Framework component: Trace File Analyzer version 26.2.0 Oracle Autonomous Health Framework component: Trace File Analyzer version...

PT-2026-77970

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Content Acquisition System component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successf...