CVE-2026-76873 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by...

CVE-2026-76873

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting (XSS) vulnerability in the DHCP dynamic IP display and ARP bind list display components. A LAN-based attacker can inject a malicious script via the hostname fields , which is subsequently rendered by network_config.js and n...

CVE-2026-76872

Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting (XSS) vulnerability in its DHCP static IP and IP ACL management pages. The affected CGI components are dhcp_add_staticip_cgi , dhcp_staticip_show_cgi , ip_acl_set_cgi , and ip_acl_show_cgi . An attacker with low pr...

CVE-2026-87262

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication...

CVE-2026-87261

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

CVE-2026-87259

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

CVE-2026-83165

Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Custom...

CVE-2026-76698

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

CVE-2026-76704

A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Successful exploitation could allow an attacker to access...

CVE-2026-76697

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

CVE-2026-76694

A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a...

CVE-2026-76688

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative...

CVE-2026-76677

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise...

CVE-2026-51134

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

EUVD-2026-79914

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

EUVD-2026-79913

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication...

EUVD-2026-79915

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication...

CVE-2026-87261

CVE-2026-87261 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Engineering Communication Interface component in supported version 6.2.1 . A low-privileged attacker with local logon can exploit this vulnerability to achieve unauthorized access to critical d...

CVE-2026-87260

Oracle Agile Engineering Data Management (Oracle Supply Chain), component Engineering Communication Interface , version 6.2.1 is affected by an easily exploitable vulnerability (CVSS 3.1: 7.3 HIGH ). An attacker with low privileges and access to the physical communication segment attached to the ...

CVE-2026-87262

CVE-2026-87262 affects the Engineering Communication Interface component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this with low complexity to achieve high c...