EUVD-2026-79937

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87280

Oracle VM VirtualBox (Oracle Virtualization), Core component, version 7.2.16 , contains an easily exploitable vulnerability that allows a high-privileged local attacker to cause a complete denial of service (hang or frequently repeatable crash). The attack requires user interaction from someone o...

EUVD-2026-79926

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

EUVD-2026-79803

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83350

CVE-2026-83350 affects the Oracle Net Services component of Oracle Database Server , specifically versions 21.3–21.23 and 23.4.0–23.26.3 . An unauthenticated attacker with network access via Oracle Net can trigger a hang or frequently repeatable crash , resulting in a complete denial of service o...

CVE-2026-83349

CVE-2026-83349 affects the Oracle Net Services component of Oracle Database Server in supported versions 19.3–19.32 , 21.3–21.23 , and 23.4.0–23.26.3 . An unauthenticated attacker with network access via Oracle Net can trigger a hang or frequently repeatable crash , resulting in a complete denial...

EUVD-2026-79633

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Helidon. Successful attacks of this...

CVE-2026-83228

Oracle Siebel CRM (component: Server Infrastructure ) is affected by a denial-of-service vulnerability in supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via TCP can trigger a hang or frequently repeatable crash , resulting in a complete availability loss of...

CVE-2026-83225

Oracle Siebel CRM (component: Server Infrastructure , product: Siebel CRM Deployment) is affected by a Denial of Service vulnerability in supported versions 17.0 through 26.7 . An unauthenticated attacker with network access via TCP can trigger a hang or frequently repeatable crash, resulting in ...

CVE-2026-83222

This vulnerability affects Oracle Siebel CRM Deployment (component: Server Infrastructure ), versions 17.0 through 26.7 . An unauthenticated attacker with network access via multiple protocols can trigger a hang or frequently repeatable crash, resulting in a complete denial of service . The CVSS ...

EUVD-2026-79314

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Ren Server. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-76677 Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise...

CVE-2026-76669

HPE Networking EdgeConnect SD-WAN Orchestrator contains a privilege escalation vulnerability in its API . A remote, low-privileged authenticated user can bypass authorization controls to escalate to administrative privileges, leading to complete system compromise . The vulnerability is rated CVSS...

CVE-2026-83334: Missing Authentication for Critical Function

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise...

CVE-2026-76677: Improper Privilege Management

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise...

CVE-2026-76673: Improper Authentication

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

PT-2026-93038

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial...

CVE-2026-76683: Buffer Copy without Checking Size of Input

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation...

CVE-2026-76688: Improper Authentication

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative...

CVE-2026-76669: Improper Privilege Management

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise...