EUVD-2026-106328

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SAML to compromise Oracle...

EUVD-2026-106337

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-106324

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-106193

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access...

EUVD-2026-106191

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to...

EUVD-2026-106194

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Core. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the...

EUVD-2026-106192

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. The supported version that is affected is 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle...

EUVD-2026-106164

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Cloud native deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacke...

CVE-2026-113044

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution within the browser's sandbox due to a use-after-free memory vulnerability in the V8 JavaScript engine. An attacker can exploit this issue by convincing a user to open a specially crafted...

Oracle Access Manager (October 2026 CPU)

The 12.2.1.4.0 and 14.1.2.1.0 versions of Access Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Support...

PT-2026-120899

The Custom Formatters module allows users to easily create custom Field Formatters through an admin UI without writing a custom module. The PHP formatter engine runs eval to execute user-provided PHP code and allows arbitrary PHP execution on the site. The permissions UI gives no indication about...

PT-2026-120466

The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object before updating its title and excerpt, allowing users with the Editor role and above to modify arbitrary posts of any type, including content they cannot otherwise edit such as...

PT-2026-120684

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description An issue exists in the Snort 3 Visual Basic for Applications VBA Decompression Engine. This is caused by improper range checking during the decompression of user-controlled VBA data. A...

Multiple Cisco Products Snort 3 SMTP MIME DoS (cisco-sa-snort3-mime-vulns-bkXjcKkt)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This...

Multiple Cisco Products Snort 3 DoS Vulnerabilities (cisco-sa-snort3-misc-dos-6mB22qAK_CVE-2026-20019_CVE-2026-20179_CVE-2026-20197)

According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities. - Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to...

Linux Distros Unpatched Vulnerability : CVE-2026-109729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and...

Multiple Cisco Products Snort 3 DoS Vulnerabilities (cisco-sa-snort3-misc-dos-6mB22qAK_CVE-2026-76489)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to...

Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow DoS (cisco-sa-snort3-vba-bufdos-jAuFdvn9)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - A vulnerability in the Snort 3 Visual Basic for Applications VBA Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to...

Multiple Cisco Products Snort 3 DoS (cisco-sa-snort3-gtpcodec-dos-Rmecfepz)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resultin...

Multiple Cisco Products Snort 3 Generic Routing Encapsulation DoS (cisco-sa-snort3-gre-JNpMHrTv)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation GRE tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote...