CVE-2026-87285

CVE-2026-87285 is a vulnerability in the Core component of Oracle VM VirtualBox 7.2.16 (Oracle Virtualization). A high-privileged local attacker can trigger a complete denial of service —causing a hang or frequently repeatable crash of VirtualBox. The scope change indicates the attack may signifi...

CVE-2026-87147

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a network-accessible vulnerability exploitable via HTTP. A high-privileged attacker with high attack complexity can achieve unauthorized creation, deletion, or modification of da...

CVE-2026-83450

Oracle E-Business Suite – Bills of Material (component: Setup Workbench ) is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a high-privileged attacker with network access via HTTP to compromise the product. The vulnerability carries a scope change , mea...

CVE-2026-83433

Oracle Depot Repair (component: Depot Repair Diagnostics ) within Oracle E-Business Suite is affected by an easily exploitable vulnerability in supported versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this with low complexity and no user inte...

CVE-2026-83344

Oracle Identity Manager Connector (Oracle Fusion Middleware, component: Database Application Table ) in versions 12.2.1.4.0 and 14.1.2.1.0 is vulnerable to a network-based attack via HTTP. A high-privileged attacker with low attack complexity can exploit this flaw to achieve full takeover of the ...

CVE-2026-83298

Oracle BI Publisher (component: BI Platform Security ) within Oracle Analytics version 12.2.1.4.0 is affected by an easily exploitable vulnerability that allows a high-privileged attacker with network access via HTTP to achieve full takeover of the product. The CVSS 3.1 score is 7.2 (HIGH) , with...

CVE-2026-83260

CVE-2026-83260 affects Oracle Agile PLM (component: Event Java PX ), version 9.3.6 . An easily exploitable vulnerability allows a high-privileged attacker with network access via T3 or IIOP to achieve full takeover of the product (CVSS 3.1: 9.1 CRITICAL ). Notably, the scope is changed , meaning ...

CVE-2026-83195

Oracle Siebel CRM (component: Server Infrastructure ) is vulnerable in supported versions 17.0 through 26.7 . An easily exploitable vulnerability allows a high-privileged attacker with network access via TCP to compromise Siebel CRM Deployment, resulting in full takeover with high impact to confi...

CVE-2026-83176

CVE-2026-83176 affects Oracle E-Business Suite (Oracle Common Applications, component: CRM User Management Framework ), versions 12.2.3 through 12.2.15 . The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the application, resulting in a full takeover wi...

CVE-2026-83107

CVE-2026-83107 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are vulnerable. A high-privileged attacker with network access via HTTP can exploit this easily (low complexity, no ...

CVE-2026-83103

Oracle Forms (component: Forms Services, C/S, Charmode) within Oracle Fusion Middleware is affected by an easily exploitable vulnerability in versions 12.2.1.19.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can compromise Oracle Forms, with a scope change meaning atta...

CVE-2026-83063

CVE-2026-83063 is a high-severity vulnerability in the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via LDAP can exploit this with low complexity to achiev...

CVE-2026-83006

Oracle WebCenter Enterprise Capture (component: Client Bundle ), part of Oracle Fusion Middleware, is affected in versions 12.2.1.4.0 and 14.1.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. The scope chan...

CVE-2026-83001

A vulnerability in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . The flaw is reachable over HTTP by a high-privileged network attacker with low complexity and no user interaction. Successful e...

EUVD-2026-78919

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-81468

Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-75570

Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022363 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...

CVE-2026-23855

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote acces...

CVE-2026-79693

Dell Secure Connect Gateway (SCG) 5.0 is affected by a Least Privilege Violation in versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). A high-privileged attacker with local access could potentially exploit this flaw to gain unauthorized access to the system. The vulnerability ...