CVE-2026-62602

...

CVE-2026-62592

Oracle Siebel CRM Integration (component: Open Integration ) versions 25.12–26.6 are affected by a critical vulnerability (CVSS 3.1: 9.8 ) that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, impacting confidentiality, integrity, and availa...

CVE-2026-62558

The Installation and Configuration component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is affected. An unauthenticated attacker with local access to the hosting infrastructure can exploit this HIGH complexity vulnerability, which requires human interaction, to gain unauth...

CVE-2026-62543

Oracle Hyperion Infrastructure Technology (Installation and Configuration component, version 11.2.25.0.000) has a critical CVSS 9.8 flaw: unauthenticated remote attackers can exploit it over HTTP to fully compromise the product (C/I/A all High). No root-cause details are provided in the documents...

EUVD-2026-61522

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-62510

...

CVE-2026-61305

A HIGH-severity vulnerability (CVSS 8.3) in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged network attacker can gain unauthorized read/write access to all BI Publisher data and cause partial DoS. No exploitation detai...

CVE-2026-61011

Oracle WebCenter Sites (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected. An unauthenticated remote attacker can exploit this via HTTP, gaining unauthorized creation, deletion, or modification access to all accessible data and causing partial denial of servic...

CVE-2026-61003

...

CVE-2026-60928

...

CVE-2026-60905

CVE-2026-60905 is a critical vulnerability (CVSS 3.1: 9.6) in the Content Server component of Oracle WebCenter Content , affecting versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it requires user interaction from...

CVE-2026-72301

A flaw was found in the Linux kernel's Sound Open Firmware SOF IPC3 control module. This vulnerability, a Time-of-check to Time-of-use TOCTOU issue, arises from incorrect size handling during memory copy operations in the bytesput and bytesget functions. A local attacker could exploit this to cau...

CVE-2026-53456

In Blueprint Studio versions before 2.5.2, the SSH terminal authentication component in custom_components/blueprint_studio/backend/terminal_manager.py wrote SSH private-key material to a file under the Home Assistant configuration directory, applied restrictive permissions afterward, and relied o...

CVE-2026-53456 Blueprint Studio terminal SSH private key written to disk

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in customcomponents/blueprintstudio/backend/terminalmanager.py wrote SSH private-key material to a file under the Home Assistant configuration...

CVE-2026-72318

A flaw was found in the Linux kernel's CIFS component. A remote attacker could exploit this vulnerability by providing a specially crafted Distributed File System DFS referral. The system fails to properly validate string offsets within these referrals, which can lead to an out-of-bounds read. Th...

CVE-2026-53458 Blueprint Studio API exposed internal exception details

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in customcomponents/blueprintstudio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could conta...

CVE-2026-53458 Blueprint Studio API exposed internal exception details

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in customcomponents/blueprintstudio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could conta...

CVE-2026-53458

Blueprint Studio (a Home Assistant configuration editor add-on) prior to v2.5.2 returned raw exception strings from backend API handlers in custom_components/blueprint_studio/backend/api.py to authenticated users, exposing internal filesystem paths and implementation details that could aid finger...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.6 Images Security Update

New images are available for Red Hat build of Keycloak 26.6.6 and Red Hat build of Keycloak 26.6.6 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

GHSA-M5PQ-69XG-VCQ3 devpi-server may leak database contents

Impact If the replication protocol is enabled by using the primary or deprecated master role for a server instance, then the +changelog URL route can be used to read the complete database content including password hashes, and the ids and salts of tokens from devpi-tokens by using a trivially...