CVE-2026-60153

...

CVE-2026-60147

...

CVE-2026-60145

...

CVE-2026-47063

CVE-2026-47063 affects Oracle Java SE and Oracle GraalVM products (Libraries component). Affected: Oracle Java SE 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; GraalVM for JDK 17.0.19, 21.0.11; GraalVM Enterprise Edition 21.3.18. The vulnerability is exploitable remotely over mult...

CVE-2026-47061

...

CVE-2026-47057

...

CVE-2026-47058

CVE-2026-47058 affects Oracle Java SE (Scripting) on 8u491, 8u491-perf, and 11.0.31. The vulnerability enables an unauthenticated attacker over network protocols to compromise data confidentiality and integrity, potentially leading to unauthorized creation, deletion, or modification of data. The ...

CVE-2026-47052

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker...

CVE-2026-47047

CVE-2026-47047 affects Oracle VM VirtualBox Core in version 7.2.12. Local, low-privilege attacker with logon can compromise and take over VirtualBox (CVSS 3.1 base 7.8). Exploitation status and specific remediation are not provided in the included documents; refer to the Oracle July 2026 CPU advi...

CVE-2026-47045

CVE-2026-47045 affects the JDBC component in Oracle Database Server. Affected supported versions are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. The vulnerability allows a high-privileged attacker with network access via Oracle Net to compromise JDBC, requiring user interaction from a non-attacke...

CVE-2026-47041

CVE-2026-47041 affects Oracle VM VirtualBox Core in the Oracle VM Virtualization product, with the only affected release listed as 7.2.12. The vulnerability enables a high-privilege attacker who has login access to the infrastructure where VirtualBox runs to compromise the application, potentiall...

CVE-2026-47032

...

CVE-2026-47028

...

CVE-2026-47016

...

CVE-2026-47016

The CVE-2026-47016 issue affects Oracle Siebel CRM Integration (component: Event Publish and Subscribe) in Siebel CRM, with affected versions 17.0–26.4. The vulnerability can be exploited with physical access to compromise Siebel CRM Integration, potentially leading to unauthorized read access to...

CVE-2026-47008

...

CVE-2026-46994

...

CVE-2026-46990

CVE-2026-46990 affects Oracle Enterprise Manager Base Platform (Enterprise Config Management) in Oracle Enterprise Manager, with affected versions 13.5 and 24.1. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to modify or read data and cause a partial DOS, per ...

EUVD-2026-46400

Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum signtx / signtxeip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed calldata. An attacker could present calldata...

CVE-2026-47695 CC-Tweaked has an SSRF Protection Bypass with NAT64

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to version 1.119.0, CC-Tweaked's HTTP API http.request, http.websocket blocks requests to private network ranges to prevent server-side request forgery SSRF. This protection can be bypassed ...