CVE-2026-101763

A critical vulnerability exists in the Oracle Communications BRM - Elastic Charging Engine (component: Cloud native deployment ) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via RMI can easily exploit this flaw to compromi...

CVE-2026-101468

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM , specifically affecting the Cloud Gateway component in supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful ex...

CVE-2026-101446

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 17.0-26.9 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the application, potentially leading to a full takeover of the Sie...

CVE-2026-101445

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with access to the infrastructure where the applications execute can exploit this difficult-to-exploit vulnerability to compromise the sys...

CVE-2026-101444

The Siebel Cloud Manager component within Oracle Siebel CRM Cloud Applications (supported versions 22.3-26.9 ) is vulnerable to a flaw that allows a low-privileged attacker with infrastructure access to compromise the application. Successful exploitation can lead to unauthorized access to critica...

CVE-2026-101443

A vulnerability exists in the Siebel Cloud Manager component of the Oracle Siebel CRM Cloud Applications product, affecting versions 22.3-26.9 . A low-privileged attacker with network access via LDAP can exploit this flaw to compromise the application. Successful exploitation may lead to unauthor...

CVE-2026-101442

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult to exploit vulnerability to achieve unauthorized read access to a subset of access...

CVE-2026-101439

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). This difficult-to-exploit flaw allows an unauthenticated attacker with network access via LDAP to compromise the application. Successful exploitation may lead to un...

CVE-2026-101441

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9). This difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment of the hardware to compromise the application. Su...

CVE-2026-101440

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware to compromise the applicat...

CVE-2026-101437

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the applications, potentially impacting additional ...

CVE-2026-101438

The Siebel CRM Cloud Applications product by Oracle (specifically the Siebel Cloud Manager component) is affected by a vulnerability in versions 22.3-26.9 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this high-complexity vuln...

CVE-2026-101436

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (versions 22.3-26.9). A high-privileged attacker with logon access to the infrastructure can exploit this difficult-to-exploit vulnerability to compromise the application. Successful exploitation ...

GHSA-Q78C-5JJQ-57G8 A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery

--- - Ecosystem: Maven - Affected package: org.a2aproject.sdk:a2a-java-sdk-server-common push-notification delivery - Affected versions: = 1.2.0.Final and 1.2.1.Final-SNAPSHOT on main prior to the fix - Patched version: the release that carries the fix - CWE: CWE-918 Server-Side Request Forgery -...

A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery

--- - Ecosystem: Maven - Affected package: org.a2aproject.sdk:a2a-java-sdk-server-common push-notification delivery - Affected versions: = 1.2.0.Final and 1.2.1.Final-SNAPSHOT on main prior to the fix - Patched version: the release that carries the fix - CWE: CWE-918 Server-Side Request Forgery -...

Malicious code in research-probe-6150c1c915 (PyPI)

Source: kam193 a646eaf4fe72ba013abc53d52c0bf017a9c4f3bfc54a8c358f9f246d3ac41945 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a loca...

Malicious code in security-research-startup-snapshot-810764b303 (PyPI)

Source: kam193 c7f807a5943ac03cda3bdddc675ad3192d210e1f0ba1300959feff5d1d29c915 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a loca...

CVE-2026-111761 A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery

A2A Java SDK is the official Java SDK for the Agent2Agent A2A Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to the URL in TaskPushNotificationConfig without destination validation, scheme restrictions, or bounds on redirects...

CVE-2026-111761

The A2A Java SDK (prior to version 1.3.0.Final ) is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of destination validation, scheme restrictions, or redirect bounds in the BasePushNotificationSender component. An unauthenticated caller can register a destination via SendMessage o...

CVE-2026-111761 A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery

A2A Java SDK is the official Java SDK for the Agent2Agent A2A Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to the URL in TaskPushNotificationConfig without destination validation, scheme restrictions, or bounds on redirects...