CVE-2026-87280

Oracle VM VirtualBox (Oracle Virtualization), Core component, version 7.2.16 , contains an easily exploitable vulnerability that allows a high-privileged local attacker to cause a complete denial of service (hang or frequently repeatable crash). The attack requires user interaction from someone o...

EUVD-2026-79926

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

CVE-2026-87276

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to the host to achieve full takeover of the product, with high impact on confidentiality, integrity, and availability . The attack is rated difficult to expl...

EUVD-2026-79928

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

CVE-2026-87274

Oracle VM VirtualBox (component: Core ) version 7.2.16 is affected by a local vulnerability that allows a low-privileged attacker with logon access to cause a complete denial of service (hang or frequently repeatable crash). The attack is rated as difficult to exploit , requiring human interactio...

CVE-2026-87273

This vulnerability affects the Core component of Oracle VM VirtualBox version 7.2.16 (Oracle Virtualization). An unauthenticated attacker with local access to the host infrastructure can exploit it with low complexity, though user interaction is required. The vulnerability allows takeover of Orac...

CVE-2026-87273

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

EUVD-2026-79911

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

CVE-2026-87250

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction from a person ot...

EUVD-2026-79838

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-87183

Oracle Hyperion Financial Management (version 11.2.26.0.000) contains a vulnerability in the Security component that allows a high-privileged local attacker to take over the application, resulting in full compromise of confidentiality, integrity, and availability. Exploitation requires low comple...

CVE-2026-87164

Oracle Banking Branch (Oracle Financial Services Applications), component: Reports , is affected in supported versions 14.5.0.0.0 through 14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit and requires hum...

EUVD-2026-79797

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-79799

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87137

Oracle Hyperion Data Relationship Management (component: Access and security ) version 11.2.26.0.000 is affected by a network-based vulnerability exploitable over HTTP by a low-privileged attacker. Successful exploitation requires user interaction and involves a scope change , meaning the attack ...

EUVD-2026-79792

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-87132

Oracle Hyperion Data Relationship Management (component: Access and security ) in version 11.2.26.0.000 is vulnerable to a low-privilege attacker with network access via HTTP . Successful exploitation requires human interaction from a non-attacker and involves a scope change , meaning attacks may...

CVE-2026-83431

Oracle Product Workbench (component: WebUI ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a medium-severity vulnerability (CVSS 3.1: 5.4 ). A low-privileged attacker with network access via HTTP can exploit the flaw, but user interaction from a third party is required...

EUVD-2026-79722

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

CVE-2026-83347

This vulnerability affects the Oracle Net Services component of Oracle Database Server , versions 23.4.0–23.26.3 . An unauthenticated attacker with network access via TCPS can trigger a complete denial of service (hang or repeatable crash) of Oracle Net Services. Successful exploitation requires ...