PT-2026-77551

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description A flaw in the Lifecycle Management component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorize...

PT-2026-77377

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.6 Description An unauthenticated attacker with network access via HTTP can compromise the Marketing component of Oracle Siebel CRM. This issue may lead to unauthorized access t...

PT-2026-77806

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successf...

PT-2026-77427

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle Fusion Middleware. An unauthenticated attacker with network access via HTTP can...

PT-2026-78040

Name of the Vulnerable Software and Affected Versions Oracle Product Lifecycle Analytics version 3.6.1 Description An issue in the Installation Issues component allows a high privileged attacker with network access via Oracle Net to compromise the system. This flaw can lead to unauthorized access...

PT-2026-77546

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to a...

PT-2026-77189

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product operations allow a low-privileged Vendor to access products owned by another Vendor. The admin/controller/product/products.php controller accepts a...

PT-2026-77753

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

PT-2026-78219

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in...

The vulnerability of the standard authentication client of the Data Hub Adapter for the SAP Commerce Cloud platform allows a hacker to execute arbitrary code and cause complete system compromise.

The vulnerability of the standard authentication client for Data Hub Adapters in the SAP Commerce Cloud platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, leading to a complete compromise of the system...

PT-2026-77531

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.6 Description A flaw in the Siebel Cloud Manager component allows a high privileged attacker with network access via HTTP to compromise the system. This issue can lead to...

PT-2026-77490

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77909

Name of the Vulnerable Software and Affected Versions Oracle Product Hub versions 12.2.3 through 12.2.15 Description An issue exists in the Outbound Data component of Oracle Product Hub within Oracle E-Business Suite. A low privileged attacker with network access via HTTP can exploit this flaw to...

Linux Distros Unpatched Vulnerability : CVE-2026-62982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, sanitizemustachedict in glances/actions.py skips nested list and...

Linux Distros Unpatched Vulnerability : CVE-2026-72027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages...

PT-2026-77830

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment...

PT-2026-78012

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

PT-2026-77046

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway = 2.11.14 versions...

PT-2026-77800

Vulnerability in the Oracle Project Planning and Control product of Oracle E-Business Suite component: Change Management. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77963

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description A flaw in the Installation and Configuration component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation...