EUVD-2026-42309

Copier has a trust-prefix bypass via path traversal that runs tasks unprompted...

CVE-2026-70904

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 14:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mua2erwkux2x...

MINI-6J96-8RV4-V4R8

Bulletin has no description...

MINI-H4X9-44R3-R94P

Bulletin has no description...

CVE-2026-47187

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

MINI-4V7C-QF6F-77JR

Bulletin has no description...

MINI-3RXR-XJP2-MV35

Bulletin has no description...

MINI-XX3H-V3GC-F5WF

Bulletin has no description...

MINI-H2RQ-CW96-6GX9

Bulletin has no description...

MINI-M47X-7H9R-QVFX

Bulletin has no description...

MINI-9V72-3V5W-75JW

Bulletin has no description...

MINI-R63J-3GCM-C93V

Bulletin has no description...

MINI-P8Q4-4V68-V25X

Bulletin has no description...

MINI-44CV-VMX6-7G23

Bulletin has no description...

AlmaLinux 9 : php:8.2 (ALSA-2026:40416)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:40416 advisory. php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD CVE-2026-14355 Bug Fixes and Enhancements: Rebase PHP to 8.2.32 for...

CVE-2026-71167

Helidon 4.5.0's Imperative Web Server component is critically vulnerable (CVSS 9.4) to unauthenticated, remote HTTP attacks allowing full data compromise and partial DoS. No public exploit or root-cause details are provided; Oracle has released patches per its August 2026 CPU advisory.

CVE-2026-71134

...

CVE-2026-70816

Oracle E-Business Suite Financials for EMEA (component: Internal Operations) versions 12.2.3–12.2.15 are vulnerable. A low-privileged attacker with network HTTP access can obtain unauthorized read access to critical data and perform limited unauthorized updates, inserts, or deletes. CVSS 3.1 base...

CVE-2026-70734

...

CVE-2026-62592

Oracle Siebel CRM Integration (component: Open Integration ) versions 25.12–26.6 are affected by a critical vulnerability (CVSS 3.1: 9.8 ) that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, impacting confidentiality, integrity, and availa...