CVE-2026-101636

The Oracle Mobile Field Service product, specifically the Admin UI component within Oracle E-Business Suite , is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to c...

CVE-2026-101637

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with networ...

CVE-2026-101634

A critical vulnerability exists in the Internal Operations component of Oracle Mobile Field Service (Oracle E-Business Suite), affecting supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful ...

CVE-2026-101631

A vulnerability exists in the Router: General component of Oracle MySQL Router version 26.7.0 . An unauthenticated attacker with network access via HTTPS can compromise the service, though the attack is considered difficult to execute and requires human interaction from a third party. Successful ...

CVE-2026-101626

A vulnerability exists in the Connector/Net component of the Oracle MySQL Connectors product (version 26.7.0 ). An unauthenticated attacker with network access via multiple protocols can exploit this difficult-to-exploit vulnerability to compromise the connectors. Successful exploitation may resu...

CVE-2026-101604

The Oracle Communications Unified Inventory Management product is vulnerable in the Security component across versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful...

CVE-2026-101590

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

CVE-2026-101590

The Helidon product within Oracle Fusion Middleware (specifically the helidon-microprofile-security component) is affected by a critical vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successf...

CVE-2026-101585

The Helidon product within Oracle Fusion Middleware (specifically the helidon-cors component) is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise Helidon, potentially gaining unauthorized read, upda...

CVE-2026-101579

The helidon-grpc-server component within the Helidon product of Oracle Fusion Middleware is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP/2 can easily exploit this issue to compromise the system. Successful exploitation may lead to...

CVE-2026-101581

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-dns-resolver-round-robin. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise...

CVE-2026-101581

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient-dns-resolver-round-robin component. This issue impacts supported versions 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via DNS can exploit this vulnerability to comp...

CVE-2026-101577

A vulnerability exists in the helidon-cors component of the Oracle Fusion Middleware Helidon product, affecting supported versions 4.0.0-4.5.5 . This high-complexity vulnerability allows an unauthenticated attacker with HTTP network access to compromise Helidon, provided that human interaction fr...

CVE-2026-101565

A vulnerability exists in the Import component of Oracle Agile PLM (Oracle Supply Chain), specifically affecting version 9.3.6 . An unauthenticated attacker with access to the underlying infrastructure can exploit this vulnerability to compromise the application. Successful exploitation may lead ...

CVE-2026-101562

A vulnerability exists in the Acollect component of Oracle Agile PLM (Oracle Supply Chain) version 2.6 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access to critical data or co...

CVE-2026-101558

The Oracle Purchasing product within Oracle E-Business Suite (specifically the Approvals component) is vulnerable in versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, which requires human interaction, to compromise the product. Succ...

CVE-2026-101560

The Oracle Commerce Platform (component: Dynamo Commerce Server ) is affected by a vulnerability in version 11.4.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful exploitation may lead to unauthorized creation, deletion,...

CVE-2026-101553

A vulnerability exists in the Oracle Payroll product of Oracle E-Business Suite , specifically affecting the Element Types, Links, and Entries components. The affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to co...

CVE-2026-101551

A vulnerability exists in the Oracle Applications Manager product of Oracle E-Business Suite , specifically affecting the Oracle Diagnostics Interfaces component. Affected versions are 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compro...

CVE-2026-101547

A vulnerability exists in the Internal Operations component of the Oracle Demand Planning product within Oracle Supply Chain , specifically affecting versions 12.1 and 12.2 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the product, though ...