CVE-2026-91245

A vulnerability exists in the Runtime Tools component of Oracle WebCenter Portal (part of Oracle Fusion Middleware) affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can compromise the portal, provided they can induce human interaction from a ...

CVE-2026-91243

A vulnerability exists in the Fabric Layer component of the Oracle Business Process Management Suite (part of Oracle Fusion Middleware). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the suit...

CVE-2026-91242

A vulnerability exists in the Plugins component of Oracle Solaris version 11.4 . This easily exploitable flaw allows a high-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation requires human interaction from a user other than the attacker ...

CVE-2026-91240

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware (versions 12.2.1.4.0 and 14.1.2.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product. Successful exploitation may lea...

CVE-2026-91238

The Oracle SOA Suite product of Oracle Fusion Middleware is affected by a vulnerability in the Fabric Layer component. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access t...

CVE-2026-91237

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware . Affected supported versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the O...

CVE-2026-91230

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite within Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation ca...

CVE-2026-91225

A vulnerability exists in the Oracle SOA Suite product of Oracle Fusion Middleware (specifically within the Adapters component). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. ...

CVE-2026-91219

A vulnerability exists in the Fabric Layer component of Oracle SOA Suite within Oracle Fusion Middleware . This issue affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle SOA ...

CVE-2026-91217

A vulnerability exists in the Fabric Layer component of the Oracle SOA Suite product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Orac...

spark-python-ds-static

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-python-ds-static spark-python-ds-static Class: Privilege leftover Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation DataSourceManager.dataSourceBuilders is a JVM-global first-wins map...

CVE-2026-91212

The Oracle Identity Manager Connector product of Oracle Fusion Middleware is affected by a vulnerability in the Generic REST component. This issue impacts supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability ...

CVE-2026-91211

The Oracle Identity Manager Connector (part of Oracle Fusion Middleware) is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via SOAP can exploit this vulnerability to compromise the connector. Successful exploitation allows for unauthorized creati...

CVE-2026-87423

A vulnerability exists in the X Window System component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit flaw to compromise the system. Successful exploitation may lead to unauthorized read, update, insert, or...

CVE-2026-91209

A vulnerability exists in the X Window System component of Oracle Solaris version 11.4 . This is a difficult-to-exploit flaw that allows a low-privileged attacker with local infrastructure access to compromise the system, provided they can trigger human interaction from another person. Successful...

CVE-2026-87421

The Image Packaging System component in Oracle Solaris version 11.4 is vulnerable to an easily exploitable flaw. An unauthenticated attacker with network access via HTTP can compromise the system, though the attack requires human interaction from a user. Successful exploitation can result in unau...

CVE-2026-87422

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the underlying infrastructure to compromise the system. The attack requires human interaction from a user other than the atta...

CVE-2026-87417

A vulnerability exists in the Image Packaging System component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete acce...

CVE-2026-87415

A vulnerability exists in the Report Distribution component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit vulnerability to compromise the system, provided they can elicit h...

CVE-2026-87409

The PeopleSoft Enterprise PeopleTools product by Oracle PeopleSoft is affected by a vulnerability in the nVision component, specifically in supported versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Success...