CVE-2026-89208

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions = V2.3, Desigo PXC00-U All versions = V2.3, Desigo PXC001-E.D All versions = V2.3, Desigo PXC100-E.D All versions = V2.3, Desigo PXC12-E.D All versions = V2.3,...

CVE-2026-89208

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions = V2.3, Desigo PXC00-U All versions = V2.3, Desigo PXC001-E.D All versions = V2.3, Desigo PXC100-E.D All versions = V2.3, Desigo PXC12-E.D All versions = V2.3,...

CVE-2026-89208

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions = V2.3, Desigo PXC00-U All versions = V2.3, Desigo PXC001-E.D All versions = V2.3, Desigo PXC100-E.D All versions = V2.3, Desigo PXC12-E.D All versions = V2.3,...

EUVD-2026-98405

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions = V2.3, Desigo PXC00-U All versions = V2.3, Desigo PXC001-E.D All versions = V2.3, Desigo PXC100-E.D All versions = V2.3, Desigo PXC12-E.D All versions = V2.3,...

CVE-2026-89208

Several Siemens products are vulnerable to a memory corruption issue due to improper input bounds validation when accessing packet data. Affected systems include Capital Embedded AR Classic (various versions), Desigo PXC models (e.g., PXC00-E.D, PXC100-E.D, PXC200-E.D, PXC64-U), and Desigo PXM20-...

CVE-2026-89208: Out-of-bounds Read

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions = V2.3, Desigo PXC00-U All versions = V2.3, Desigo PXC001-E.D All versions = V2.3, Desigo PXC100-E.D All versions = V2.3, Desigo PXC12-E.D All versions = V2.3,...

PT-2026-111404

Name of the Vulnerable Software and Affected Versions Capital Embedded AR Classic 431-422 affected versions not specified Capital Embedded AR Classic R20-11 versions prior to V2303 Desigo PXC00-E.D versions V2.3 and later Desigo PXC00-U versions V2.3 and later Desigo PXC001-E.D versions V2.3 and...

Siemens Capital Embedded AR Classic

SUMMARY The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest...

Siemens Capital Embedded AR Classic buffer error vulnerability

Siemens Capital Embedded AR Classic has a buffer overflow vulnerability. This vulnerability arises from failing to properly validate input boundaries before accessing data packets, which may allow unverified remote attackers to trigger memory reads beyond the expected packet boundaries...

EUVD-2026-47175

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Rapid Implementation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle H...

EUVD-2026-47026

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Core. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise PeopleSoft Enterprise HCM Human...

EUVD-2026-46870

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: OW HR PR Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-60619

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: Time Accounting and HRM Base. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-60492

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: OW HR PR Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

PT-2026-62701

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 Description A flaw in the Global Payroll for Switzerland component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-58885

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

CVE-2026-34280

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Job Profile Manager. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-34264

During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages. Due to this, an authenticated user with low privileges could guess and enumerate the content shown, beyond their authorized scope. This leads to disclosure of sensitive information...

CVE-2026-34297

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite component: Knowledge Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM...

EUVD-2026-24358

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Job Profile Manager. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...