Linux Distros Unpatched Vulnerability : CVE-2026-44202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user t...

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-83477

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Workbenches. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardwa...

CVE-2026-83441

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

CVE-2026-83341

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Command Line - RapidClone. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83133

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2026-76820

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

CVE-2026-87174

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is vulnerable to an unauthenticated attack over TCP that allows compromise of the product. Successful exploitation can result in high impact to confidentiality (unauthorized access to critical or all accessible d...

CVE-2026-87154

CVE-2026-87154 affects the Oracle Product Hub component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Product Hub without user interaction. S...

CVE-2026-87149

This vulnerability affects Oracle Contract Lifecycle Management for Public Sector (component: Award/PO ) in Oracle E-Business Suite, versions 12.2.8 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity to achieve unauthorized access to critic...

EUVD-2026-79785

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracl...

EUVD-2026-79779

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Whil...

CVE-2026-83461

CVE-2026-83461 affects the MWA Terminal Server component of Oracle Mobile Application Server within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via TCP , requiring no user interaction. Succes...

CVE-2026-83287

Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically the Presentation Services component, is affected by a vulnerability exploitable by a low-privileged network attacker via SOAP . The affected supported versions are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . Successfu...

EUVD-2026-79627

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes...

CVE-2026-83252

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based vulnerability exploitable via HTTP by an unauthenticated attacker. Exploitation is rated as difficult (high complexity). Successful exploitation can lead to high co...

EUVD-2026-79500

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

EUVD-2026-79482

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware...

CVE-2026-83127

CVE-2026-83127 affects the Oracle Sales Offline product (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , with no user interaction required. Due to...

CVE-2026-83073

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ) versions 22.3 through 26.7 are affected by a vulnerability allowing an unauthenticated attacker with access to the adjacent physical communication segment to compromise the application. The attack requires low complexity and ...