EUVD-2026-61732

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Proposals. Successfu...

EUVD-2026-61511

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion...

EUVD-2026-61317

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCent...

EUVD-2026-61290

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-78056

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector...

PT-2026-78150

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-77812

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-72764 n8n before 1.123.67 Module Cache Poisoning via Code Node

n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions before 1.123.67, 2.31.5, and 2.32.1, a user able to run a Code node could poison a cached module and thereby alter other users' Code-node executions on the same runner, affecting...

The vulnerability of the xfrm6_get_saddr() function in the net/ipv6/xfrm6_policy.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrm6getsaddr function in the net/ipv6/xfrm6policy.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized variables. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

The vulnerability of the nr_route_frame() function in the net/netrom/nr_route.c module, which is part of the networking functions in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nrrouteframe function in the net/netrom/nrroute.c module, which is part of the networking functions in the Linux kernel, relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the s:NetrwBookHistSave() function in the Vim text editor, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the s:NetrwBookHistSave function in the Vim text editor is related to improper elimination of separators. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the smc_tcp_syn_recv_sock() function in the net/smc/af_smc.c module of the SMC protocol family implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smctcpsynrecvsock function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrit...

CVE-2026-65923

A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, to cause unintended server-side requests. The issue primarily affects confidentiality and integrity and has been addressed in fixed Artifactory versions...

CVE-2026-65617

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...

EUVD-2026-49582

A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, to cause unintended server-side requests. The issue primarily affects confidentiality and integrity and has been addressed in fixed Artifactory versions...

CVE-2026-16812

CVE-2026-16812 affects VeloCloud Orchestrator (VCO) On-Prem. The vulnerability is an OS command injection that could allow a remote attacker to access privileged internal functionality and impact the VCO host, compromising confidentiality, integrity, and availability of the orchestrator and manag...

CVE-2026-12991

The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot APK v5.5.0 exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and selective traffic blocking techniques to...

PT-2026-65111

A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, to cause unintended server-side requests. The issue primarily affects confidentiality and integrity and has been addressed in fixed Artifactory versions...

SUSE CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

EUVD-2026-47016

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Web Content Management. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...