CVE-2026-101822

A vulnerability exists in the Internal Operations component of the Oracle Bills of Material product within Oracle E-Business Suite (versions 12.2.3-12.2.15). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product. Successful ex...

CVE-2026-101815

A vulnerability exists in the Assets product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to cause a complete DOS (hang or repeatable crash), perform unauthor...

CVE-2026-101812

The Oracle E-Business Suite product Oracle Complex Maintenance, Repair and Overhaul (specifically the LOV component) is vulnerable in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to compromise the product. Su...

CVE-2026-101807

A vulnerability exists in the BRM Server component of Oracle Communications Billing and Revenue Management affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the ...

CVE-2026-101808

A vulnerability exists in the WebUI component of the Oracle Product Workbench product within Oracle E-Business Suite (versions 12.2.3-12.2.15). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the workbench. Successful exploitation can lead to unauthori...

CVE-2026-101806

A vulnerability exists in the Connector/ODBC component of the Oracle MySQL MySQL Connectors product (affected version 26.7.1 ). A low-privileged attacker with network access via multiple protocols can exploit this difficult to exploit vulnerability to compromise MySQL Connectors. Successful explo...

CVE-2026-101803

A vulnerability exists in the XML component of Oracle MySQL Server and MySQL Cluster . Affected versions of MySQL Server include 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 , while MySQL Cluster affects versions 8.0.0-8.0.49 , 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 . A high privileged ...

CVE-2026-101803

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: XML. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

CVE-2026-101800

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to...

CVE-2026-101800

A vulnerability exists in the MySQL Server and MySQL Cluster products of Oracle MySQL (component: Server: Security: Privileges ). The issue affects MySQL Server versions 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1, as well as MySQL Cluster versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26...

CVE-2026-101792

A vulnerability exists in the Security component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attac...

CVE-2026-101785

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

CVE-2026-101785

A vulnerability exists in the JSON component of MySQL Server and MySQL Cluster products from Oracle MySQL. Affected versions include MySQL Server 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 , as well as MySQL Cluster 8.0.0-8.0.49 , 8.4.0-8.4.12 , 9.7.0-9.7.3 , and 26.7.0-26.7.1 . A low-privile...

CVE-2026-101783

The MySQL Router product from Oracle MySQL (specifically component Router: General ) is affected by a vulnerability in version 26.7.0 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the MySQL Router. Successful exploitation may lead to ...

CVE-2026-101774

A vulnerability in the Server: Pluggable Auth component of MySQL Server and MySQL Cluster products from Oracle MySQL allows an unauthenticated attacker with network access via multiple protocols to compromise the systems. The flaw is difficult to exploit but can result in a complete Denial of Ser...

CVE-2026-101774

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to explo...

CVE-2026-101775

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit...

CVE-2026-101773

A vulnerability exists in the Server: Group Replication Plugin of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1). An unauthenticated attacker with ac...

CVE-2026-101773

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily...

CVE-2026-101769

A difficult to exploit vulnerability exists in the MySQL Cluster product of Oracle MySQL (component: Cluster: General), affecting supported versions 26.7.0-26.7.1 . An unauthenticated attacker with network access via TCP can compromise the system, potentially leading to a complete Denial of Servi...