CVE-2026-83162

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Application...

CVE-2026-83079

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel CRM Cloud Application...

CVE-2026-83073

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-73962

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-87279

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to cause a complete denial of service (hang or frequently repeatable crash) and unauthorized modification, insertion, or deletion of accessible data. The CVS...

CVE-2026-87278

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87260

Oracle Agile Engineering Data Management (Oracle Supply Chain), component Engineering Communication Interface , version 6.2.1 is affected by an easily exploitable vulnerability (CVSS 3.1: 7.3 HIGH ). An attacker with low privileges and access to the physical communication segment attached to the ...

CVE-2026-87178

CVE-2026-87178 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An easily exploitable vulnerability allows a high-privileged attacker with network access via SQL to compromise the product. The attack has a scope change , meaning it may significantly i...

CVE-2026-87159

Oracle HRMS (India) , a component of Oracle E-Business Suite (sub-component: Internal Operations), is affected in supported versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletio...

EUVD-2026-79759

Vulnerability in the Helidon product of Oracle Fusion Middleware component: LRA. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can...

CVE-2026-83447

CVE-2026-83447 affects the Oracle Bills of Material product within Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component. Successful...

EUVD-2026-79731

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Depot Repair Diagnostics. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot Repair...

CVE-2026-83418

Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The attack is rated as difficult to exploit (high complexity, n...

CVE-2026-83277

Oracle Agile PLM MCAD Connector (component: CAX Client ), version 3.6 , contains an easily exploitable local vulnerability. A low-privileged attacker with logon access to the infrastructure can compromise the connector, resulting in unauthorized creation, deletion, or modification of critical dat...

EUVD-2026-79570

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment...

EUVD-2026-79489

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Application...

CVE-2026-83143

A vulnerability in Oracle Siebel CRM – Siebel Apps - Life Sciences (component: eDetailing ), affecting versions 17.0 through 26.7 , allows an unauthenticated attacker with network access via HTTP to compromise the system. The attack requires user interaction from a person other than the attacker....

EUVD-2026-79523

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-56831 Shopper: Negative discount values accepted and propagated through order calculation pipeline

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...

EUVD-2026-78917

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...