Azul Zulu: CVE-2026-83378: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...

PT-2026-119442

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise MySQL Cluster. Successful attacks of this...

PT-2026-120015

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager Connector version 12.2.1.4.0 Oracle Identity Manager Connector version 14.1.2.1.0 Description An issue exists in the LDAP Gateway component of Oracle Fusion Middleware. An unauthenticated attacker with network access vi...

Oracle E-Business Suite: CVE-2026-101636: Critical Patch Update

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Admin UI. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field...

PT-2026-120052

Vulnerability in Oracle GoldenGate component: Vendor Access Module. Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to...

PT-2026-119065

Vulnerability in Oracle REST Data Services component: Database Actions. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this...

PT-2026-119270

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.5 Description A flaw in the helidon-microprofile-security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation c...

PT-2026-119356

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications component: Platform. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with netwo...

PT-2026-119908

Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: Open Integration. Supported versions that are affected are 25.12-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful...

PT-2026-119991

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 Description An issue exists in the Asset Management component that allows a high privileged attacker with network access via HTTP to compromise the system...

PT-2026-119952

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment...

Oracle MySQL Vulnerability CVE-2026-101773

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily...

Linux ipset Hash Generation Data Compromise

The vulnerability of the net/netfilter/ipset/ipsethashgen.h component of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

Oracle E-Business Suite: CVE-2026-101671: Critical Patch Update

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46137)

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: fix potential data-race This mptcppmaddtimer helper is executed as a timer callback in softirq context. To avoid any data races, the socket lock needs to be held with bhlocksock. If the socket is in use,...

Atlassian Jira Service Management Data Center and Server 10.3.x < 10.3.24 / 11.3.x < 11.3.11 (JSDSERVER-16827)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16827 advisory. - Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15....

PT-2026-133803

TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 2.4.9-tuxcare.3...

PT-2026-119125

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...

PT-2026-119479

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/ODBC version 26.7.1 Description A flaw in the MySQL Connectors product allows a low-privileged attacker with network access via multiple protocols to compromise the system. Successful exploitation can lead to unauthorize...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31698)

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the PDH cert, don't attempt to copy the blobs to userspace if the firmware command failed. If the failure was due to an invalid length...