PT-2026-120838

Name of the Vulnerable Software and Affected Versions Laravel versions 12.45.0 through 12.67.0 Laravel version 13.26.0 and earlier Description A crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. This...

bouncycastle-1.86-1.1 on GA media (moderate)

bouncycastle-1.86-1.1 on GA media Announcement ID: openSUSE-SU-2026:12090-1 Rating: moderate Cross-References: CVE-2026-17507 CVE-2026-17508 CVE-2026-18036 CVE-2026-18040 CVE-2026-71885 CVE-2026-71886 CVE-2026-71887 CVE-2026-71888 CVE-2026-71889 CVE-2026-71890 CVE-2026-71891 CVE-2026-71892...

CVE-2026-91615

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having None privilege with network access via SOCKS5 to compromise Java VM. While...

CVE-2026-91422

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment...

CVE-2026-91369

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...

CVE-2026-87392

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware component: Core. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise WebCenter Content: Imaging...

CVE-2026-87387

Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards component: Homebuilder Management. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards...

CVE-2026-101405

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel Apps - Marketing. Successful...

CVE-2026-101396

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Siebel Apps - Marketing executes to compromi...

CVE-2026-101385

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-91615

A vulnerability exists in the Java VM component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with network access via SOCKS5 can exploit this difficulty-to-exploit flaw to compromise the Java VM. Successful exploitation may l...

CVE-2026-91422

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM (Siebel CRM Deployment product), affecting versions 17.0-26.9 . A low privileged attacker with network access via HTTP could exploit this difficulty-to-exploit vulnerability to compromise the deployment. Successful...

CVE-2026-91369

A vulnerability exists in the Siebel Cloud Manager component of the Siebel CRM Cloud Applications product (versions 22.3-26.9 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the applications. Successful exploitation may r...

CVE-2026-87392

A vulnerability exists in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core ), specifically affecting version 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can easily exploit this flaw to compromise the system. Successful exploitation may re...

CVE-2026-101405

The Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing) is affected by a vulnerability in versions 17.0-26.9 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise the product. Successful exploitation can lead ...

CVE-2026-101396

A vulnerability exists in the Siebel Apps - Marketing component of Oracle Siebel CRM , specifically affecting supported versions 17.0-26.9 . A low-privileged attacker with local infrastructure access can exploit this difficult-to-exploit vulnerability to compromise the product. Successful exploit...

CVE-2026-101385

A vulnerability exists in the Oracle REST Data Services (Core component) affecting supported versions 24.2.0-26.1.0 . A high privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Successful exploitation may result in unauthorized creation, deletion, or ...

CVE-2026-101382

A vulnerability exists in the Core component of Oracle REST Data Services affecting supported versions 24.2.0-26.1.0 . This high-complexity vulnerability allows a low privileged attacker with network access via HTTP to compromise the service. Successful exploitation can lead to unauthorized read ...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value via the seed wheel acquisition logic in src/virtualenv/seed/wheels/acquire.py and pipinvoke.py, where wheels are cached and then passed to pip for installation without verifying their integri...

CVE-2026-113602

A flaw was found in json-smart. A remote attacker can exploit this input validation bypass vulnerability by submitting crafted JSON data containing a literal substitute 0x1A character followed by malformed content. This causes strict-mode validation checks to prematurely finish parsing and accept...