CVE-2026-87258: Improper Access Control

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

CVE-2026-87154: Improper Access Control

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

CVE-2026-87220: Improper Access Control

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-83161: Improper Access Control

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

PT-2026-92500

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83027: Improper Access Control

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attach...

PT-2026-92916

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Bills of Material versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Bills of Material product allows a low privileged attacker with network access via HTTP to...

ROS-20260915-73-0005

The vulnerability of the Forms component in Google Chrome and Microsoft Edge browsers is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of data...

CVE-2026-87219: Improper Access Control

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

PT-2026-92854

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.9 through 12.2.15 Description A flaw in the Personalization component of the Oracle Applications Framework allows a low privileged attacker with network access via HTTP to...

PT-2026-93032

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.26.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

CVE-2026-91983: Incorrect Authorization

Vikunja before 2.6.0 contains an API token scope bypass vulnerability in task read endpoints where authorization fails to inspect query string parameters. Attackers with limited token scopes can use the expand parameter to access restricted data like comments, reactions, and time entries without...

PT-2026-92663

Name of the Vulnerable Software and Affected Versions Oracle Field Service of Oracle E-Business Suite versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Field Service product. A low privileged attacker with network access via HTTP can...

PT-2026-93020

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.26.0.000 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

PT-2026-92900

🚨 CVE-2026-83433 Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Depot Repair Diagnostics. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

PT-2026-92984

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS India versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of Oracle HRMS India. A low privileged attacker with network access via HTTP can compromise the system,...

PT-2026-92972

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Contract Lifecycle Management for Public Sector versions 12.2.8 through 12.2.15 Description An issue exists in the Award/PO component of the Oracle Contract Lifecycle Management for Public Sector. A low privilege...

PT-2026-92927

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.4 Description A flaw in the LRA component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access to a subs...

PT-2026-92898

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Product Workbench versions 12.2.3 through 12.2.15 Description A flaw in the WebUI component of Oracle Product Workbench allows a low privileged attacker with network access via HTTP to compromise the system. The...

PT-2026-92819

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle B...