CVE-2026-91328

A vulnerability exists in the Deployment SEC component of Oracle JD Edwards EnterpriseOne Tools (affected versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with infrastructure access can exploit this flaw to compromise the product, potentially resulting in a full takeover . Successful expl...

CVE-2026-101763

A critical vulnerability exists in the Oracle Communications BRM - Elastic Charging Engine (component: Cloud native deployment ) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via RMI can easily exploit this flaw to compromi...

CVE-2026-101465

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (supported versions 17.0-26.9 ). A low-privileged attacker with logon access to the infrastructure where the product executes can exploit this difficult to exploit vulnerability to compromise the deploym...

CVE-2026-101464

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). A low-privileged attacker with local access to the infrastructure can exploit this to compromise the deployment, potentially gaining unauthorized access to, or the ability...

CVE-2026-101462

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (supported versions 17.0-26.9 ). A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the deployment, potentially gaining unauthorized access to critical ...

CVE-2026-101453

The Siebel CRM Deployment product (component: Server Infrastructure ) of Oracle Siebel CRM is affected by a vulnerability in versions 17.0-26.9 . A high-privileged attacker with logon access to the infrastructure where the service executes can exploit this flaw to compromise the deployment, poten...

CVE-2026-101448

A vulnerability exists in the Siebel Management Console component of Oracle Siebel CRM Deployment (versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can exploit this issue to achieve unauthorized read access to a subset of accessible data. The vulnerability is classif...

PT-2026-119436

Name of the Vulnerable Software and Affected Versions Oracle Communications BRM - Elastic Charging Engine versions 15.0.0.0.0 through 15.2.0.0.0 Description An issue exists in the Cloud native deployment component that allows an unauthenticated attacker with network access via RMI Remote Method...

CVE-2026-16460

A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject...

ROOT-OS-DEBIAN-12-CVE-2025-68733 CVE-2025-68733 in linux - Patched by Root

Root has patched CVE-2025-68733 in the linux package for Root:Debian:12. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-9268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in Jackson Databind

Summary SPSS Collaboration and Deployment Services is affected by vulnerabilities in Jackson Databind. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-54516 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-mode...

PT-2026-115849

When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed approval. Because fork pull request runs are inserted under the base repository, a user who can open a pull request from a fork could...

PT-2026-115871

GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without...

GitLab 13.6 < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-9268)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticat...

CVE-2026-53999 Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)

Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-native apps. Prior to 0.58.0, the Kubernetes controller deserializes the user-controlled radapp.io/status annotation on a Deployment and uses its container resource identifier for...

CVE-2026-102175

A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via ...

EUVD-2026-101391

A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via ...

CVE-2026-102175

A Heap-based Buffer Overflow vulnerability exists in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved . A remote unauthenticated attacker capable of controlling or intercepting the configured SDX/SRC server connection can exploit this by sending a crafted frame...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Jackson Databind

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Jackson Databind. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-83557 DESCRIPTION: DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied...