EUVD-2026-79630

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-integrations-neo4j. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-83278

Oracle Helidon (part of Oracle Fusion Middleware), specifically the helidon-integrations-neo4j component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . The vulnerability requires an unauthenticated attacker with access to the physical communication segment (adjacent network) and is rated...

CVE-2026-83264

Oracle Product Lifecycle Analytics (version 3.6.1 ), component Installation Issues , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with local logon to the infrastructure to compromise the product. The scope change means attacks may significantly impact a...

EUVD-2026-79571

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

EUVD-2026-79526

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Application Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM...

CVE-2026-83154

This vulnerability affects the Open UI component of Oracle Siebel CRM End User , versions 17.0 through 26.7 . An unauthenticated attacker with network access via SOAP can exploit it with low complexity and no user interaction. Successful exploitation allows unauthorized creation, deletion, or mod...

EUVD-2026-79432

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Forms Services, C/S, Charmode. Supported versions that are affected are 12.2.1.19.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-83096

CVE-2026-83096 affects Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware, versions 12.2.1.19.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack comp...

EUVD-2026-79401

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

EUVD-2026-79375

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCent...

CVE-2026-83027

Oracle Identity Manager Connector (component: Core) within Oracle Fusion Middleware is affected by a critical vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this with low complexity...

EUVD-2026-79355

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attach...

EUVD-2026-79338

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2026-73957

CVE-2026-73957 affects Oracle WebCenter Portal (component: Portlet Services ) in Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the product, but successful exploitation requires user interaction from someone ...

CVE-2026-73955

Oracle PeopleSoft Enterprise PeopleTools (component: Charting ) is affected in supported versions 8.61–8.63 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful attacks require human interaction from a user other than the attacker. Impact incl...

EUVD-2026-79309

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Charting. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools...

CVE-2026-73952

CVE-2026-73952 affects the Portlet Services component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to achieve unauthorized creation, deletion, modification,...

CVE-2026-73926

CVE-2026-73926 affects the Authentication Engine component of Oracle Access Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, modification, and...

PT-2026-92826

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web General. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. The supported versions affected are 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. This vulnerability is difficult to exploit; it allows low-privilege attackers with network access via multiple protocols to...