PT-2026-107867

Name of the Vulnerable Software and Affected Versions curl and libcurl versions 8.12.0 through 8.22.0 Description A use-after-free memory corruption issue exists during HTTP/2 uploads. When a client performs an upload, a malicious server can send a crafted RST STREAM response with the reason HTTP...

PT-2026-92812

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Platform Security component allows a low privileged attacker with access to the...

PT-2026-92525

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component allows a high privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-93105

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to a complete Denial of Servic...

PT-2026-92936

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successf...

PT-2026-92588

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue exists in the Runtime Tools component of Oracle WebCenter Portal. A high privileged attacker with network access via HTTP can exploit th...

PT-2026-92576

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCent...

PT-2026-92530

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

PT-2026-92487

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component allows a high privileged attacker with network access via HTTP to compromise the system. This issue c...

PT-2026-92820

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 12.2.1.4.0 Description An issue exists in the BI Platform Security component of the Oracle BI Publisher product of Oracle Analytics. A high privileged attacker with network access via HTTP can exploit this flaw to...

PT-2026-92631

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Forms version 12.2.1.19.0 Oracle Fusion Middleware Oracle Forms version 14.1.2.0.0 Description A flaw exists in the Forms Services, C/S, Charmode component of Oracle Forms. A high privileged attacker with networ...

PT-2026-92513

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Apps - Marketing. Successful attac...

CVE-2026-83481: Improper Privilege Management

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successf...

CVE-2026-83413: Improper Access Control

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-87147: Improper Access Control

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracl...

PT-2026-92873

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.3 Description A flaw exists in the RDBMS component of the Oracle Database Server. This issue allows an unauthenticated attacker with network access via Oracle Net to compromise the RDBMS,...

PT-2026-93208

Name of the Vulnerable Software and Affected Versions Oracle GraalVM for JDK 17 version 23.0.13.1 Oracle GraalVM for JDK 21 version 23.1.12.1 Oracle GraalVM version 25.0.4.1 Description A flaw exists in the Compiler component of Oracle GraalVM for JDK and Oracle GraalVM. This issue allows an...

PT-2026-93210

Name of the Vulnerable Software and Affected Versions Oracle GraalVM for JDK 17 version 23.0.13.1 Oracle GraalVM for JDK 21 version 23.1.12.1 Oracle GraalVM version 25.0.4.1 Description A flaw exists in the Compiler component of Oracle GraalVM for JDK and Oracle GraalVM. This issue allows an...

PT-2026-92938

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Self-serv What-if Analysis. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-92680

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description A flaw exists in the Command Line - RapidClone component of the Oracle Applications Manager. A high privileged attacker with network access via HTT...