CVE-2026-87332

A vulnerability exists in Oracle JD Edwards EnterpriseOne Tools (component: E1 Dev Platform Tech - Cloud ) affecting versions 9.2.0.0-9.2.26.5 . This high-complexity vulnerability allows a high-privileged attacker with infrastructure access to compromise the product. Successful exploitation may l...

CVE-2026-101763

A critical vulnerability exists in the Oracle Communications BRM - Elastic Charging Engine (component: Cloud native deployment ) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via RMI can easily exploit this flaw to compromi...

CVE-2026-101468

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM , specifically affecting the Cloud Gateway component in supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful ex...

CVE-2026-101445

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with access to the infrastructure where the applications execute can exploit this difficult-to-exploit vulnerability to compromise the sys...

CVE-2026-101446

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the application, potentially leading to a full takeover of the Sie...

CVE-2026-101442

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult to exploit vulnerability to achieve unauthorized read access to a subset of access...

CVE-2026-101443

A vulnerability exists in the Siebel Cloud Manager component of the Oracle Siebel CRM Cloud Applications product, affecting versions 22.3-26.9 . A low-privileged attacker with network access via LDAP can exploit this flaw to compromise the application. Successful exploitation may lead to unauthor...

CVE-2026-101444

The Siebel Cloud Manager component within Oracle Siebel CRM Cloud Applications (supported versions 22.3-26.9 ) is vulnerable to a flaw that allows a low-privileged attacker with infrastructure access to compromise the application. Successful exploitation can lead to unauthorized access to critica...

CVE-2026-101440

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware to compromise the applicat...

CVE-2026-101439

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). This difficult-to-exploit flaw allows an unauthenticated attacker with network access via LDAP to compromise the application. Successful exploitation may lead to un...

CVE-2026-101441

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9). This difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment of the hardware to compromise the application. Su...

CVE-2026-101437

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the applications, potentially impacting additional ...

CVE-2026-101438

The Siebel CRM Cloud Applications product by Oracle (specifically the Siebel Cloud Manager component) is affected by a vulnerability in versions 22.3-26.9 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this high-complexity vuln...

CVE-2026-101436

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (versions 22.3-26.9). A high-privileged attacker with logon access to the infrastructure can exploit this difficult-to-exploit vulnerability to compromise the application. Successful exploitation ...

A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery

--- - Ecosystem: Maven - Affected package: org.a2aproject.sdk:a2a-java-sdk-server-common push-notification delivery - Affected versions: = 1.2.0.Final and 1.2.1.Final-SNAPSHOT on main prior to the fix - Patched version: the release that carries the fix - CWE: CWE-918 Server-Side Request Forgery -...

GHSA-Q78C-5JJQ-57G8 A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery

--- - Ecosystem: Maven - Affected package: org.a2aproject.sdk:a2a-java-sdk-server-common push-notification delivery - Affected versions: = 1.2.0.Final and 1.2.1.Final-SNAPSHOT on main prior to the fix - Patched version: the release that carries the fix - CWE: CWE-918 Server-Side Request Forgery -...

spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-gateway/tree/master.svg?style=svg"CircleCI",...

Malicious code in research-probe-6150c1c915 (PyPI)

Source: kam193 a646eaf4fe72ba013abc53d52c0bf017a9c4f3bfc54a8c358f9f246d3ac41945 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a loca...

Malicious code in security-research-startup-snapshot-810764b303 (PyPI)

Source: kam193 c7f807a5943ac03cda3bdddc675ad3192d210e1f0ba1300959feff5d1d29c915 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a loca...

CVE-2026-34160

CVE-2026-34160 — Unauthenticated SSRF in Chamilo LMS via PENS plugin pens.php Severity : High CVSS 8.6 CWE : CWE-918 Server-Side Request Forgery Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-g2xj-4cch-j276 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-34160 Credit ...