EUVD-2026-47086

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Configuration. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-46567

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-63959

A flaw was found in the Linux kernel's USB Type-C Universal Serial Bus Type-C subsystem. A malicious or broken USB-C port can transmit a specially crafted data frame that advertises more data objects than it actually contains. This can lead to the system reading from uninitialized memory,...

CVE-2026-16421

Concrete details: CVE-2026-16421 affects Google Chrome WebAudio, with an inappropriate implementation allowing remote code execution inside a sandbox via a crafted HTML page, before version 150.0.7871.182. Impact is high and exploitation could occur remotely through a crafted page. Affected produ...

EUVD-2026-41605

Gitea: Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts...

CVE-2026-63926

A flaw was found in the Linux kernel's sockmap feature. When the bpfmsgpushdata function processes data, it incorrectly calculates the offset for data fragments, leading to an inconsistent memory arrangement. This issue could potentially allow a local attacker to cause data corruption or system...

CVE-2026-62466

CVE-2026-62466 affects Oracle E-Business Suite Human Resources (Data Removal Tool) with affected 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise Oracle Human Resources, potentially taking over the resource. The CVSS v3.1 base score is ...

CVE-2026-62451

CVE-2026-62451 affects Oracle Work in Process within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.14–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Work in Process, leading to unauthorized creation, deleti...

CVE-2026-61236

CVE-2026-61236 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil ( Staffing component) with affected version 9.1. The vulnerability allows an unauthenticated attacker over HTTP to access PeopleSoft data, potentially leading to unauthorized data access or full access to accessible dat...

CVE-2026-61223

CVE-2026-61223 concerns Oracle Communications Converged Application Server (Security component). Affected versions are 8.2 and 8.3. The issue is accessible without authentication over TCP/IP and, per the description, can lead to takeover of the Converged Application Server with high impact on con...

CVE-2026-61190

CVE-2026-61190 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Install component, version 6.2.1. The vulnerability allows a low-privilege attacker who has network access via HTTP to compromise the system. Successful exploitation requires user interaction a...

CVE-2026-61181

CVE-2026-61181 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management) with affected version 6.2.4. The vulnerability is exploitable over a network (HTTP) by a low-privilege attacker and requires user interaction; it may lead to unauthorized data access and pote...

CVE-2026-61160

CVE-2026-61160 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) in 11.4.0. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially leading to unauthorized access to data and a...

CVE-2026-61121

Vulnerability CVE-2026-61121 affects Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll) for versions 12.2.8–12.2.15. The issue allows a low-privilege attacker with network access over HTTP to compromise Oracle HRMS (UK), with potential takeover (CVSS v3.1 base score 8.8; impacts to conf...

CVE-2026-61087

CVE-2026-61087 affects Oracle PeopleSoft Enterprise FIN Payables (v9.2) — a vulnerability in the Security component that an unauthenticated, network-accessing attacker can exploit via HTTP to access or compromise FIN Payables data. The CVSSv3.1 base score is 7.5 (Impact: Confidentiality) with vec...

CVE-2026-61083

CVE-2026-61083 affects Oracle E-Business Suite’s Performance Management, specifically the Appraisals component, with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle Performance Management, enabling unauthoriz...

CVE-2026-61065

CVE-2026-61065 affects Oracle Access Manager (Oracle Fusion Middleware), specifically the Authentication Engine. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The entry describes an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to comprom...

CVE-2026-61055

The CVE-2026-61055 vulnerability affects Oracle PeopleSoft, specifically the SCM Order Management component (Security) in the 9.2 line. Affected: PeopleSoft Enterprise SCM Order Management. Root cause details are not provided beyond the vulnerability’s existence. Impact per the entry: high confid...

CVE-2026-61010

Oracle E-Business Suite’s Oracle Process Manufacturing Systems (Internal Operations) is affected in versions 12.2.3–12.2.15. The vulnerability allows a network-accessible, low-privileged attacker (via HTTP) to compromise the system, potentially leading to complete takeover (CVSS 3.1 base score 8....

CVE-2026-61000

CVE-2026-61000 affects Oracle Process Manufacturing Systems within Oracle E-Business Suite (component: Internal Operations). Affected are EBS versions 12.2.3 through 12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, potentially leading to unauthorized...