CVE-2026-12254

Netskope is notified about a potential gap in its agent NSClient where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via t...

CVE-2026-112308

crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validateurl private-address check. Attackers influencing agent tool input through prompt injection can direct...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM® SDK, Java™ Technology Edition

Summary IBM Virtualization Engine TS7700 is susceptible to information disclosure and data tampering CVE-2026-60147 and denial of service CVE-2026-16243 vulnerabilities due to the use of IBM SDK, Java Technology Edition, Version 8. TS7700 uses Java to provide the Management Interface. Vulnerabili...

Apple macOS Security Vulnerabilities

Versions of Apple macOS Golden Gate prior to version 27 contain security vulnerabilities. These vulnerabilities stem from improper configuration of additional authorizations, which may allow applications access to sensitive user data...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access critical data or all data through HTTP network access. These attacker...

Oracle Applications DBA permission licensing and access control issues

Oracle Applications DBA versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the AD Utilities component. They may allow low-privilege attackers to log in and execute infrastructure tasks. This could lead to...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Case management Service 11g+ component. They may allow unauthorized attackers to access critical data or all accessible data via HTTP network...

Oracle Product Workbench Authorization Issues Vulnerability

Oracle Product Workbench versions 12.2.3 to 12.2.15 have an authorization issue vulnerability. This vulnerability stems from issues with the WebUI components, allowing unauthorized attackers to access through the HTTP network. This enables unauthorized creation, deletion, or modification of...

Oracle Purchasing security vulnerability

Oracle Purchasing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, and require interaction from someone other than the attacker. This...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Analytic Server component. The vulnerabilities are difficult to exploit, allowing attackers with low privileges to log in and access the infrastructure. Th...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Database Actions component. They may allow low-privilege attackers to access through the HTTP network, perform unauthorized...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components, which may allow unauthenticated attackers to access through the HTTP network. This enables unauthorized access to certain data when user interaction ...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow low-privilege attackers to access critical data through the HTTP network. Unauthorized access can lead...

Oracle JavaFX security vulnerabilities

Oracle JavaFX versions 25.0.4 and 27 have security vulnerabilities. These vulnerabilities stem from issues with JavaFX components, which may allow unauthorized attackers to access network connections via various protocols. Unauthorized access can lead to unauthorized reading of certain accessible...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster contain a security vulnerability stemming from issues with the Server: XML component. This vulnerability may allow highly privileged attackers to gain network access via various protocols, enabling them to create, delete, or modify critical data or all...

Oracle iSupport security vulnerabilities

A security vulnerability exists in Oracle iSupport versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Service Requests component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical data or all accessible data...

Oracle Java SE security vulnerabilities

Oracle Java SE, Oracle JavaFX, and Oracle GraalVM Enterprise Edition versions Java SE 8u503; Oracle JavaFX 21.0.12, 25.0.4, and 27 versions; Oracle GraalVM Enterprise Edition 21.3.19.1.1 version have security vulnerabilities. These vulnerabilities stem from JavaFX component issues and are difficu...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible dat...

Oracle Identity Manager Connector security vulnerabilities

Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the LDAP Gateway component, which may allow unauthorized attackers to access critical data or all accessible data through the LDAP network, without prope...